CVE-2023-27563

The n8n package 0.218.0 for Node.js allows Escalation of Privileges...

n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27563 via n8n (>=0.81.0, <=0.214.5)

n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27563 Source advisory: OSV:GHSA-97CP-MR4M-9MCF...

CVE-2023-27563

The n8n package 0.218.0 for Node.js allows Escalation of Privileges...

CVE-2023-27563

The n8n package 0.218.0 for Node.js allows Escalation of Privileges...

CVE-2023-27563

The CVE-2023-27563 entry concerns the n8n package 0.218.0 for Node.js. A root cause described in connected sources is a lack of object checks when merging user-supplied fields with the server object in the updateCurrentUser path (MeController), enabling an authenticated user to escalate privilege...