Количество 2
Количество 2
CVE-2026-59253
n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures.
GHSA-2xgm-wc4g-5jvg
n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-59253 n8n before 2.28.0 contains an improper authorization vulnerability allowing authenticated users to assign workflows to folders in other projects. Attackers can bypass project and folder authorization boundaries by supplying crafted request payloads during workflow creation, causing logical integrity violations in target project folder structures. | CVSS3: 5 | 0% Низкий | около 2 месяцев назад | |
GHSA-2xgm-wc4g-5jvg n8n: Improper Authorization Allows Authenticated Users to Assign Workflows to Folders in Other Projects | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу