CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-27562
https://notcve.org/view.php?id=CVE-2023-27562
The n8n package 0.218.0 for Node.js allows Directory Traversal. • https://github.com/n8n-io/n8n/releases https://security.netapp.com/advisory/ntap-20230622-0007 https://www.synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 2CVE-2023-27564
https://notcve.org/view.php?id=CVE-2023-27564
The n8n package 0.218.0 for Node.js allows Information Disclosure. • https://github.com/david-botelho-mariano/exploit-CVE-2023-27564 https://github.com/n8n-io/n8n/releases https://security.netapp.com/advisory/ntap-20230622-0007 https://www.synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-27563
https://notcve.org/view.php?id=CVE-2023-27563
The n8n package 0.218.0 for Node.js allows Escalation of Privileges. • https://github.com/n8n-io/n8n/releases https://security.netapp.com/advisory/ntap-20230622-0007 https://www.synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf •