The n8n package 0.218.0 for Node.js allows Directory Traversal.
Date: 2023-05
Affected: n8n/n8n
Attack vector: path-traversal
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2023-27562
CVE-2023-27563
CVE-2023-27564
CWE: CWE-22
CWE-668
CVSS: 6.5 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

The n8n package 0.218.0 for Node.js allows Directory Traversal.


Mitigations:

Architectural layers (MAESTRO):