Lucene search
K

49 matches found

OSV
OSV
added 2025/09/08 6:31 p.m.5 views

GHSA-V2X8-97XQ-8XRR N8N's Chat Trigger component is vulnerable to XSS

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

8.8CVSS7.8AI score0.00557EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2025/09/08 6:31 p.m.13 views

N8N's Chat Trigger component is vulnerable to XSS

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

8.8CVSS7.8AI score0.00557EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/09/08 6:15 p.m.29 views

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

8.8CVSS0.00557EPSS
Exploits1References3
OSV
OSV
added 2025/09/08 6:15 p.m.9 views

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

8.8CVSS7.8AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/09/08 12:0 a.m.2 views

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

7.2AI score0.00557EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/08 12:0 a.m.26 views

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

0.00557EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/09/08 12:0 a.m.7 views

n8n 安全漏洞

n8n is a scalable workflow automation tool from n8n open source. A security vulnerability exists in N8N versions v1.95.3, v1.100.1, and v1.101.1, which stems from the presence of an arbitrary file upload in the Chat Trigger component that could lead to the execution of arbitrary code...

8.8CVSS6.8AI score0.00557EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/09/08 12:0 a.m.7 views

PT-2025-36488

Name of the Vulnerable Software and Affected Versions: N8N versions 1.95.3, 1.100.1, and 1.101.1 Description: An arbitrary file upload vulnerability exists in the Chat Trigger component of N8N. This allows attackers to execute arbitrary code by uploading a crafted HTML file. Recommendations: Upda...

8.8CVSS7.2AI score0.00557EPSS
Exploits1References12
CVE
CVE
added 2025/09/08 12:0 a.m.23 views

CVE-2025-56265

CVE-2025-56265 affects the N8N Chat Trigger component and is tied to an arbitrary file upload vulnerability that allows code execution via uploading a crafted HTML file in N8N versions 1.95.3, 1.100.1 and 1.101.1. The CVSSv3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack comple...

8.8CVSS7.2AI score0.00557EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder