5 matches found
GHSA-JPQ7-226W-6CXX n8n: NoSQL Injection in MongoDB Node Find And Replace Operation
Impact An authenticated user with workflow edit access could supply a malicious filter value in the MongoDB node's Find And Replace operation. The value was not validated before being passed to MongoDB as a query filter, allowing unintended documents to be matched and overwritten with...
7.7CVSS5.3AI score0.0026EPSS
SaveExploits0References3
20