Threats tagged 'ghsa-6vpf-74v5-9qcm'

A filter injection vulnerability exists in the Quick Base node of n8n versions before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1. This flaw allows attackers to supply untrusted input, such as webhook data, that is sent as raw query text to the Quick Base API. Exploitation can cause the 'Get Many' operation to return all records or the 'Delete' operation to remove all records accessible by the workflow credentials.