Lucene search
+L

28 matches found

Github Security Blog
Github Security Blog
added 2026/07/22 10:1 p.m.8 views

n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access

Impact Endpoints in /rest/dynamic-node-parameters/ lacked authorization scopes, making it reachable by any authenticated user with no workflow creation or execution required. By supplying an absolute URL in the routing configuration, a caller could override the node type's declared baseURL,...

6.3CVSS5.8AI score0.00143EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder