1 matches found
n8n server-side request forgery vulnerability
Versions prior to n8n 1.123.83, 2.41.4, and 2.42.1 contain a server-side request forgery vulnerability. This vulnerability arises because Slack Trigger webhooks bypass signature verification when no signature key is provided; as a result, they are susceptible to server-side request forgery attack...
7.5CVSS5.9AI score0.00273EPSS
SaveExploits0References2
20