n8n.formWebhook.Information.Disclosure
Description
This indicates an attack attempt against an Information Disclosure vulnerability in n8n.
The vulnerability is due to improper validation of certain form-based workflow requests. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could result in unauthorized access to server-side files and exposure of sensitive information, potentially enabling further compromise depending on deployment configuration.
Affected Products
n8n versions 1.65.0 through 1.120.x
Impact
Information Disclosure: attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://github.com/n8n-io/n8n/security/advisories/GHSA-v4pr-fm98-w9pg
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |