CVE-2024-8183

Summary

CVE-2024-8183 is a Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability affecting version 2.20.2 of prefecthq/prefect. This issue permits unauthorized domains to access sensitive data, posing a significant risk. The unauthorized access could potentially lead to data leaks, loss of confidentiality, service disruption, and data integrity risks. The vulnerability arises due to a misconfiguration of the CORS settings, allowing unintended domains to make requests that should be restricted. This weakness can result in unauthorized access to the underlying database, highlighting the importance of properly securing CORS configurations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.