High severity7.6OSV Advisory· Published Mar 20, 2025· Updated Apr 15, 2026
CVE-2024-8183
CVE-2024-8183
Description
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
prefectPyPI | >= 3.0.0rc1, < 3.0.3 | 3.0.3 |
prefectPyPI | < 2.20.17 | 2.20.17 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/advisories/GHSA-4v9f-r55g-g6hcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-8183ghsaADVISORY
- github.com/PrefectHQ/prefect/commit/8f159b404126d93964a4daace7619bc553fa318cghsaWEB
- github.com/PrefectHQ/prefect/issues/15074ghsaWEB
- github.com/PrefectHQ/prefect/releases/tag/2.20.17ghsaWEB
- github.com/prefecthq/prefect/commit/a69266e077169b8a32ad76b1dd3ea63b96d011c2nvdWEB
- huntr.com/bounties/b801de43-ff9f-4db9-b583-4797d4f7d3d2nvdWEB
News mentions
0No linked articles in our index yet.