Cross Site Request Forgery

Prefect is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to insufficient CSRF protection mechanisms, allowing an attacker to steal secrets or potentially gain remote code execution by submitting a crafted request...

Cross-Site Request Forgery vulnerability in Prefect

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using a self-hosted, open source Prefect API...

Remote code execution

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using the open source Prefect web server's API...

CVE-2023-6022 Cross-Site Request Forgery (CSRF) in prefecthq/prefect

Cross-Site Request Forgery CSRF in GitHub repository prefecthq/prefect prior to 2.16.5...

CVE-2023-6022

CVE-2023-6022 describes a Cross-Site Request Forgery (CSRF) vulnerability in the open-source Prefect project (prefecthq/prefect) affecting versions prior to 2.16.5. The CVSS base score is 8.8 (High) with impacts to confidentiality, integrity, and availability. Related sources indicate the issue c...

Prefect Cross-Site Request Forgery Vulnerability

Prefect is a workflow orchestration tool that enables developers to build, observe, and react to data pipelines. Prefect suffers from a cross-site request forgery vulnerability that originates from allowing an attacker to steal secrets and execute remote code via cross-site request forgery CSRF...

PT-2023-32482

Name of the Vulnerable Software and Affected Versions prefect versions prior to 2.16.5 Description The issue allows an attacker to steal secrets and potentially gain remote code execution via Cross-Site Request Forgery CSRF using the Prefect API. This can be exploited in self-hosted, open source...