Intel

AIKIDO-2024-10260

n8n is vulnerable to Cross-site Scripting (XSS)

Cross-site Scripting (XSS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Sep 12, 2024

30

Low Risk

This Affects:

jsn8n
1.51.0 - 1.58.1
Fixed in 1.59.0
Are you affected? Scan for Free

TL;DR

Affected versions of the package are vulnerable to Cross-site Scripting (XSS) in the editor.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

n8n is vulnerable to Cross-site Scripting (XSS) in versions 1.51.0 - 1.58.1.

How to fix this

Upgrade the n8n library to the patch version.