PT-2023-21207 · Npm · N8N

CVE-2023-27563 · Publicado 2023-05-10 · Atualizado 2025-01-27

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions n8n package versions prior to 0.216.1

Description The issue allows Escalation of Privileges in the n8n package for Node.js.

Recommendations For versions prior to 0.216.1, update to version 0.216.1 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2023-27563

GHSA-97CP-MR4M-9MCF

Produtos afetados

N8N

Referências · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27563.json · Exploit
• 🔥 https://synacktiv.com/sites/default/files/2023-05/Synacktiv-N8N-Multiple-Vulnerabilities_0.pdf · Exploit
• https://github.com/n8n-io/n8n · Nota
• https://github.com/n8n-io/n8n/commit/1414bfa7906ea089b9dc55853405e774a5384ce2 · Nota
• https://github.com/n8n-io/n8n/pull/5526 · Nota
• https://github.com/n8n-io/n8n/releases · Nota
• https://github.com/n8n-io/n8n/releases/tag/n8n%400.216.1 · Nota
• https://security.netapp.com/advisory/ntap-20230622-0007 · Nota
• https://t.me/cibsecurity/63751 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27563 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-27563 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-97cp-mr4m-9mcf · Aviso do Fabricante
• https://t.me/cvenotify/108788 · Publicação no Telegram