Cross-Site Request Forgery vulnerability in Prefect

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-6022 · ADVISORY
• prefecthq/prefect commit 227dfcc · WEB
• PrefectHQ/prefect · WEB
• prefecthq/prefect · PACKAGE
• huntr.com/bounties/dab47d99-551c-4355-9ab1-c99cb90235af · WEB
• pypi.org/project/prefect · PACKAGE
• GitHub Advisory GHSA-4hh5-2678-83fx · ADVISORY

prefect のその他の脆弱性

• CVE-2026-3514高 7.5In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions fo…
• CVE-2026-3515高 8.5A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject a…
• CVE-2026-7725中 6.3A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefe…
• CVE-2026-7724中 5.0A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_ur…
• CVE-2026-7723高 7.3A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSock…