CVE-2023-6022
Assigner: @huntr_ai
Published: 2023-11-16T16:07:33.744Z
State: PUBLISHED
title: Cross-Site Request Forgery (CSRF) in prefecthq/prefect
descriptions: value: Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.
affected: vendor: prefecthq
product: prefecthq/prefect
versions: version: unspecified
lessThan: 2.16.5
status: affected
versionType: custom
metrics: cvssV3_0: version: 3.0
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
baseScore: 8.8
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-352 Cross-Site Request Forgery (CSRF)
cweId: CWE-352
source: advisory: dab47d99-551c-4355-9ab1-c99cb90235af
discovery: EXTERNAL