What’s Vulnerable › Vulnerabilities

CVE-2023-6022: Cross-Site Request Forgery (CSRF) in prefecthq/prefect

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-16 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.

Affected products

• prefecthq/prefect: all versions

References

• https://github.com/prefecthq/prefect/commit/227dfcc7e3374c212a4bcd68b14e090b1c02d9d3
• https://huntr.com/bounties/dab47d99-551c-4355-9ab1-c99cb90235af
• https://github.com/prefecthq/prefect/commit/227dfcc7e3374c212a4bcd68b14e090b1c02d9d3
• https://huntr.com/bounties/dab47d99-551c-4355-9ab1-c99cb90235af

Get alerted when CVE-2023-6022 or the next vulnerability affects your stack