Executive brief
Cross-Site Request Forgery vulnerability in Prefect
Affected products
- PyPI prefect
Junglewise Threat Intelligence
CVE-2023-6022: PYSEC-2026-1799 - Cross-Site Request Forgery vulnerability in Prefect
CVE-2023-6022 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: prefect (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1800 - Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
- Prefect authentication bypass via health check path exemption
- Prefect prefect-github argument injection in GitHubRepository
- Prefect Git argument injection in GitRepository Pull Handler
- Prefect SSRF bypass via DNS rebinding in validate_restricted_url