7 matches found
n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
Impact A workflow's "This workflow can be called by" setting was enforced by the Execute Workflow node but was not consulted when the same workflow was attached to an Agent as a tool. A user who could build an Agent could therefore call a workflow that its owner had restricted, and read back what...
EUVD-2013-1924
Malware in sbrugna...
CVE-2013-1930
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...
Design/Logic Flaw
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...
CVE-2013-1930
MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...
CVE-2013-1930
CVE-2013-1930 affects MantisBT 1.2.12 prior to 1.2.15, enabling authenticated users to bypass the workflow restriction and close issues. Root cause details are not provided beyond the bypass of workflow checks. Impact is limited to issue state manipulation by authenticated users; no exploitation ...
