CVE-2024-4879 1

Vulnerability (CVE)

CVE-2024-4879: Service Now Improper Input Validation Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 29, 2024

ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

Vulnerabilities & Patching