28 matches found
n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access
Impact Endpoints in /rest/dynamic-node-parameters/ lacked authorization scopes, making it reachable by any authenticated user with no workflow creation or execution required. By supplying an absolute URL in the routing configuration, a caller could override the node type's declared baseURL,...
6.3CVSS5.8AI score0.00143EPSS
SaveExploits0References7Affected Software1
20