CORS Misconfiguration in PrefectHQ's Data Orchestration Tool

CVE-2024-8183

What is CVE-2024-8183?

A misconfiguration in the Cross-Origin Resource Sharing (CORS) policy of PrefectHQ's prefect version 2.20.2 allows unauthorized domains to access sensitive resources. This flaw can lead to unauthorized access to backend databases, compromising confidentiality, and resulting in potential data leaks or disruptions. Organizations using this version should review their CORS settings and apply necessary mitigative actions to protect their data integrity.

References