Remote code execution

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using the open source Prefect web server's API...