Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25m4-rhwx-m523

Опубликовано: 29 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

EPSS

Процентиль: 65%
0.00505
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

CVSS3: 7.5
fstec
около 1 года назад

Уязвимость системы управления ИТ-инфраструктурой Now Platform, связанная с непринятием мер по нейтрализации специальных элементов веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 65%
0.00505
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89