Prefect Cross-Site Request Forgery Vulnerability

Prefect is a workflow orchestration tool that enables developers to build, observe, and react to data pipelines. Prefect suffers from a cross-site request forgery vulnerability that originates from allowing an attacker to steal secrets and execute remote code via cross-site request forgery CSRF...

PT-2023-32482

Name of the Vulnerable Software and Affected Versions prefect versions prior to 2.16.5 Description The issue allows an attacker to steal secrets and potentially gain remote code execution via Cross-Site Request Forgery CSRF using the Prefect API. This can be exploited in self-hosted, open source...