CVE-2023-6022

HIGH8.8EPSS 0.18%

Cross-Site Request Forgery vulnerability in Prefect

Published: 11/16/2023Modified: 2/4/2026
Also known as:GHSA-4hh5-2678-83fxCGA-q8xj-cv79-3qxh

Description

An attacker is able to steal secrets and potentially gain remote code execution via CSRF using a self-hosted, open source Prefect API.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (5)