1 matches found
Prefect has an Authentication Middleware Bypass when URL paths are appended with 'health' or 'ready'
In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health' or 'ready' from authentication checks. This allo...
7.5CVSS7.2AI score0.00628EPSS
SaveExploits1References4Affected Software1
20