Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/10 9:07 p.m.8 views

n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check

Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...

5.9CVSS0.00264EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder