Lucene search
+L

1 matches found

CNNVD
CNNVD
•added 2026/10/28 12:00 a.m.•6 views

n8n server-side request forgery vulnerability

Versions prior to n8n 1.123.83, 2.41.4, and 2.42.1 contain a server-side request forgery vulnerability. This vulnerability arises because Slack Trigger webhooks bypass signature verification when no signature key is provided; as a result, they are susceptible to server-side request forgery attack...

7.5CVSS5.9AI score0.00273EPSS
SaveExploits0References2
Rows per page
Query Builder