Junglewise Threat Intelligence

CVE-2023-27562: n8n directory traversal in credential-translation endpoint

CVE-2023-27562 · Severity: low · CVSS 3.1 · Published 2023-05-10

Technologies: N8n. Vendors: N8n.

Executive brief

n8n is a workflow automation platform that allows users to connect and automate various applications and services. A directory traversal vulnerability in the credential-translation endpoint could allow authenticated users to access sensitive files and configuration data outside of intended directories, potentially exposing credentials, private keys, or other confidential information stored on the server.

Technical details

This is a CWE-22 directory traversal vulnerability in n8n's credential-translation endpoint. The endpoint failed to properly validate user-supplied file paths, allowing an authenticated attacker to use path traversal sequences (e.g., ../) to access arbitrary files on the server. The vulnerability requires authentication (PR:L) and network access. An attacker with valid credentials can read sensitive files such as configuration files, private keys, or other secrets. The vulnerability was patched in version 0.216.1 via commits that implement proper path validation in the credential-translation endpoint.

Affected products

  • n8n n8n prior to 0.216.1

Timeline

  • 2023-05-10: disclosed
  • 2023-05-10: patched: Fixed in version 0.216.1

References

Related threats