1 matches found
n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...
5.9CVSS0.00264EPSS
SaveExploits0References6Affected Software1
20