12 matches found
GHSA-F2CP-M7MV-8JPV n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers
Impact The Elasticsearch and ElasticSecurity nodes built REST endpoints by interpolating user-provided identifiers straight into the request path. A value containing path separators or dot segments changed which endpoint the request actually reached, so an operation intended for one document coul...
6.3CVSS5.6AI score0.00491EPSS
SaveExploits0References6
20