CyberRota Analysis
AI-GeneratedThe vulnerability affects n8n versions prior to 1.123.64, 2.29.8, and 2.30.1, specifically in the Resource Locator component, which improperly handles the cachedResultUrl parameter in a stored DOM context. This allows an attacker with workflow creation or editing privileges to inject malicious URLs, potentially executing scripts in the victim's browser when they interact with the crafted workflow. Organizations using n8n should prioritize patching this vulnerability to mitigate the risk of cross-site scripting attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open() without scheme validation. An attacker with workflow creation/editing privileges can craft a workflow with a malicious (e.g., javascript:) scheme in cachedResultUrl; when a victim opens the crafted workflow and interacts with external links, the payload executes in the victim's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)