Skip to content
Threat Feed
Subscribe

Tag

Sanitizer-Bypass

1 brief RSS
high advisory

n8n: Stored DOM XSS via Resource Locator `cachedResultUrl`

A stored DOM XSS vulnerability in n8n's Resource Locator feature allows attackers to inject malicious JavaScript into the cachedResultUrl parameter. When a victim opens a specially crafted workflow and interacts with external links, the JavaScript payload executes in their browser, due to a lack of scheme validation for `cachedResultUrl` passed to `window.open()`.

n8n +4 xss vulnerability privilege-escalation authenticated-rce sanitizer-bypass
2t 1c