CVE-2025-56265 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploa…
High CVSS: 8.8

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file.
Vendor
N8n
Product
N8n
CWE
CWE-434
Yayın Tarihi
2025-09-08 18:15:33
Güncelleme
2025-09-12 20:47:21
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 N8n HIGH N8n 2025

Referanslar

https://github.com/nikolas-ch/CVEs/blob/main/N8N/N8N_v1.100.1/ChatTrigger_StoredXSSviaUnrestrictedFileUpload/StoredXSSviaUnristrictedFileUpload.txt https://github.com/nikolas-ch/CVEs/tree/main/N8N/N8N_v1.100.1 https://github.com/nikolas-ch/CVEs/tree/main/N8N/N8N_v1.100.1/ChatTrigger_StoredXSSviaUnrestrictedFileUpload