13174 matches found
Information disclosure
The n8n package 0.218.0 for Node.js allows Information Disclosure...
Directory traversal
The n8n package 0.218.0 for Node.js allows Directory Traversal...
Code injection
The n8n package 0.218.0 for Node.js allows Escalation of Privileges...
n8n security vulnerabilities
n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in version 0.218.0 of the n8n package for Node.js. An attacker exploited the vulnerability to cause information disclosure...
CVE-2023-27563
The CVE-2023-27563 entry concerns the n8n package 0.218.0 for Node.js. A root cause described in connected sources is a lack of object checks when merging user-supplied fields with the server object in the updateCurrentUser path (MeController), enabling an authenticated user to escalate privilege...
CVE-2023-27563
The n8n package 0.218.0 for Node.js allows Escalation of Privileges...
CVE-2023-27564
The n8n package 0.218.0 for Node.js allows Information Disclosure...
CVE-2023-27563
The n8n package 0.218.0 for Node.js allows Escalation of Privileges...
CVE-2023-27564: Exposure of Resource to Wrong Sphere
The n8n package 0.218.0 for Node.js allows Information Disclosure...
CVE-2023-27564
The n8n package 0.218.0 for Node.js allows Information Disclosure...
CVE-2023-27562
The n8n package 0.218.0 for Node.js allows Directory Traversal...
CVE-2023-27563
The n8n package 0.218.0 for Node.js allows Escalation of Privileges...
CVE-2023-27563: Undefined Security Weakness
The n8n package 0.218.0 for Node.js allows Escalation of Privileges...
CVE-2023-27562: Improper Limitation of a Pathname to a Restricted Directory
The n8n package 0.218.0 for Node.js allows Directory Traversal...
CVE-2023-27562
The CVE-2023-27562 entry concerns the n8n package for Node.js, specifically version 0.218.0, which is vulnerable to Directory Traversal. The root cause is described as improper input validation for the credentialType argument of the getCredentialTranslationPath function, allowing an attacker to d...
CVE-2023-27562
The n8n package 0.218.0 for Node.js allows Directory Traversal...
CVE-2023-27562
The n8n package 0.218.0 for Node.js allows Directory Traversal...
CVE-2023-27564
The n8n package 0.218.0 for Node.js allows Information Disclosure...