n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27562 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27562 Source advisory: OSV:GHSA-P58X-7733-VP9M...

CVE-2023-27562

The n8n package 0.218.0 for Node.js allows Directory Traversal...

CVE-2023-27562

The n8n package 0.218.0 for Node.js allows Directory Traversal...

CVE-2023-27562

The n8n package 0.218.0 for Node.js allows Directory Traversal...

CVE-2023-27562

The n8n package 0.218.0 for Node.js allows Directory Traversal...

CVE-2023-27562

The CVE-2023-27562 entry concerns the n8n package for Node.js, specifically version 0.218.0, which is vulnerable to Directory Traversal. The root cause is described as improper input validation for the credentialType argument of the getCredentialTranslationPath function, allowing an attacker to d...