Cross-Site Request Forgery (CSRF) in prefecthq/prefect

CVE-2023-6022

What is CVE-2023-6022?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Prefect platform, specifically affecting versions prior to 2.16.5. This weakness allows an attacker to trick users into executing unwanted actions on web applications in which they are authenticated. Attackers can exploit this flaw to manipulate the application's behavior, potentially leading to unauthorized actions performed on behalf of the user, thereby jeopardizing the integrity and confidentiality of user data.

References