CVE-2024-4879
ServiceNow Improper Input Validation Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
29 de jul. de 2024
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
ServiceNow / Utah, Vancouver, and Washington DC Now Platform
Vulnerabilidade
ServiceNow Improper Input Validation Vulnerability
Adicionado ao KEV
29 de jul. de 2024
Corrigir até
19 de ago. de 2024
Uso conhecido em ransomware
Não
Descrição resumida
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154; https://nvd.nist.gov/vuln/detail/CVE-2024-4879