Description
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。 ServiceNow存在安全漏洞。攻击者利用该漏洞可以在 Now Platform 环境中远程执行代码。
ServiceNow Jelly 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154
https://github.com/gh-ost00/CVE-2024-4879
https://avd.aliyun.com/detail?id=AVD-2024-4879
https://www.venustech.com.cn/new_type/aqtg/20240712/27733.html
https://www.tenablecloud.cn/plugins/nessus/286265
https://www.cyfirma.com/research/servicenow-rce-cve-2024-4879-vulnerability-analysis-and-exploitation/
https://medium.com/@cyber_dark/cve-2024-4879-jelly-template-injection-vulnerability-in-servicenow-5d5a242a6257
https://fortiguard.fortinet.com/cn/outbreak-alert/servicenow-rce
https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data