CVE-2024-8183: CORS Misconfiguration in prefecthq/prefect
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect prior to version 3.0.3 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
Other sources
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8183?
CVE-2024-8183 is classified as a high severity vulnerability due to its potential for unauthorized access to sensitive data.
How do I fix CVE-2024-8183?
To mitigate CVE-2024-8183, review and update your CORS configurations to ensure only trusted domains have access.
What type of attack does CVE-2024-8183 enable?
CVE-2024-8183 enables CORS misconfiguration attacks, allowing unauthorized domains to access sensitive data.
Which versions of Prefect are affected by CVE-2024-8183?
CVE-2024-8183 affects Prefect version 2.20.2 and possibly earlier versions that share the same CORS misconfiguration.
Can CVE-2024-8183 lead to data leaks?
Yes, CVE-2024-8183 can lead to data leaks and loss of confidentiality due to unauthorized domain access.