Beveiligingsadvies

CVE-2026-56359

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-08 13:49:02

Laatst bijgewerkt 2026-07-09 13:37:23

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

n8n before 2.8.0 contains a cross-site scripting vulnerability in the credential management flow where authenticated users can inject malicious JavaScript URLs into OAuth2 credential Authorization URL fields. Attackers can craft malicious credentials and trick victims into clicking the OAuth authorization button, executing arbitrary scripts in their browser session with the victim's privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗