Skip to main content

Origin Validation Error

CVE-2024-8183

High
7.6/10

Summary

A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks. This issue affects prefect versions through 2.20.16 and 2.82 through 3.0.2.

  • LOW
  • NETWORK
  • LOW
  • UNCHANGED
  • REQUIRED
  • NONE
  • HIGH
  • LOW

CWE-346 - Origin Validation Error

The software does not properly verify that the source of data or communication is valid.

References

Advisory Timeline

  • Published