Lucene search

K
cvelist@huntr_aiCVELIST:CVE-2023-6022
HistoryNov 16, 2023 - 4:07 p.m.

CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect

2023-11-1616:07:33
CWE-352
@huntr_ai
www.cve.org
cve-2023-6022
cross-site request forgery
prefecthq/prefect
github repository
2.16.5

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

52.8%

Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.

CNA Affected

[
  {
    "vendor": "prefecthq",
    "product": "prefecthq/prefect",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "2.16.5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

52.8%

Related for CVELIST:CVE-2023-6022