Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| prefecthq | prefecthq/prefect | affected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-6931 | Prefect CORS (Cross-Origin Resource Sharing) misconfiguration |
 Github GHSA |
GHSA-4v9f-r55g-g6hc | Prefect CORS (Cross-Origin Resource Sharing) misconfiguration |
Thu, 20 Mar 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Thu, 20 Mar 2025 10:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks. | |
| Title | CORS Misconfiguration in prefecthq/prefect | |
| Weaknesses | CWE-346 | |
| References |
| |
| Metrics |
cvssV3_0
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: @huntr_ai
Published:
Updated: 2025-03-20T14:22:16.940Z
Reserved: 2024-08-26T15:20:26.526Z
Link: CVE-2024-8183
Vulnrichment
Updated: 2025-03-20T14:21:57.941Z
NVD
Status : Deferred
Published: 2025-03-20T10:15:41.370
Modified: 2026-04-15T00:35:42.020
Link: CVE-2024-8183
Redhat
No data.
OpenCVE Enrichment
No data.