Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-25m4-rhwx-m523

Опубликовано: 29 окт. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 7.5

Описание

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

EPSS

Процентиль: 53%
0.00308
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 7.5
nvd
10 месяцев назад

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

CVSS3: 7.5
fstec
10 месяцев назад

Уязвимость системы управления ИТ-инфраструктурой Now Platform, связанная с непринятием мер по нейтрализации специальных элементов веб-страницы, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 53%
0.00308
Низкий

8.7 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-89