Origin Validation Error

Overview prefect is a Prefect is a new workflow management system, designed for modern infrastructure and powered by the open-source Prefect Core workflow engine. Users organize Tasks into Flows, and Prefect takes care of the rest. Affected versions of this package are vulnerable to Origin...

PT-2025-12222

Name of the Vulnerable Software and Affected Versions prefecthq/prefect version 2.20.2 Description A CORS Cross-Origin Resource Sharing misconfiguration allows unauthorized domains to access sensitive data, potentially leading to unauthorized access to the database. This can result in data leaks,...

Prefect 访问控制错误漏洞

Prefect is a workflow orchestration tool from Prefect Open Source that enables developers to build, observe and react to data pipelines. An access control error vulnerability exists in Prefect version 2.20.2 that stems from a CORS misconfiguration that allows unauthorized domains to access...

Cross Site Request Forgery

Prefect is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to insufficient CSRF protection mechanisms, allowing an attacker to steal secrets or potentially gain remote code execution by submitting a crafted request...

Cross-Site Request Forgery vulnerability in Prefect

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using a self-hosted, open source Prefect API...

Remote code execution

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using the open source Prefect web server's API...

CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect

Cross-Site Request Forgery CSRF in GitHub repository prefecthq/prefect prior to 2.16.5...

CVE-2023-6022

CVE-2023-6022 describes a Cross-Site Request Forgery (CSRF) vulnerability in the open-source Prefect project (prefecthq/prefect) affecting versions prior to 2.16.5. The CVSS base score is 8.8 (High) with impacts to confidentiality, integrity, and availability. Related sources indicate the issue c...

Prefect Cross-Site Request Forgery Vulnerability

Prefect is a workflow orchestration tool that enables developers to build, observe, and react to data pipelines. Prefect suffers from a cross-site request forgery vulnerability that originates from allowing an attacker to steal secrets and execute remote code via cross-site request forgery CSRF...

PT-2023-32482

Name of the Vulnerable Software and Affected Versions prefect versions prior to 2.16.5 Description The issue allows an attacker to steal secrets and potentially gain remote code execution via Cross-Site Request Forgery CSRF using the Prefect API. This can be exploited in self-hosted, open source...