Yadhukrishnam

The source control push endpoint relies on file paths and status provided in the client request payload rather than server-side status computed for the user. This allows an authenticated project-scoped user to reference files from projects they are not authorized to access and push deletions of those workflows and credentials, leading to cross-project data destruction. This issue requires the Source Control (Environments) enterprise feature to be licensed, enabled, and connected to a remote repository.

An authorization bypass exists in the custom project role deletion and reassignment process. The system fails to perform project-level authorization checks when deleting a custom project role with a reassignment target, verifying only that the target role exists and is project-scoped. This allows a user with the `role:manageProject` global scope to delete any custom project role and reassign users, including themselves, to the built-in `project:admin` role, resulting in unauthorized administrative control over projects.

n8n is an open-source workflow automation platform. An authenticated user with permission to create or modify workflows can exploit crafted expressions in workflow parameters to trigger system command execution on the host running n8n. This allows for potential full server compromise, including the theft of API keys, credentials, and secrets. The issue stems from an expression escape vulnerability and incomplete AST-based sanitization. Public exploits are available.

n8n, an open source workflow automation platform, contains a flaw in the Git node. This allows authenticated users with create or modify permissions for workflows to execute arbitrary system commands or read arbitrary files on the n8n host. The issue impacts systems where users have the ability to create or modify workflows. No information is available regarding the number of potentially affected devices worldwide or any real-world incidents of exploitation. The Git node is a component used for interacting with Git repositories. The `Git node` allows users to perform actions such as cloning, pulling, and pushing changes to Git repositories.

The issue arises from an oversight in the Hoppscotch Browser Extension, allowing messages to be sent and processed from unauthorized origins. This exposes users to potential security risks, as any site running on the browser with the extension installed can bypass CORS restrictions. The vulnerability can lead to improper validation of integrity check values, potentially resulting in system compromise.

The issue allows remote code execution, enabling attackers to run malicious code on the server. This is particularly concerning for users hosting D-Tale publicly. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to the llhttp parser in the http module, which does not strictly use the CRLF sequence to delimit HTTP requests, leading to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parser, contrary to RFC7230 section 3, which states that only the CRLF sequence should delimit each header-field.