Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/04 3:31 a.m.14 views

GHSA-HVPH-5985-R63V Prefect Unauthenticated Event Injection via /api/events/in WebSocket

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be...

7.3CVSS6.4AI score0.00421EPSS
SaveExploits0References10
Rows per page
Query Builder