漏洞描述
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。 ServiceNow存在安全漏洞。攻击者利用该漏洞可以在 Now Platform 环境中远程执行代码。
ServiceNow Jelly 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-21402: Jellyfin <10.7.0 - Local File Inclusion
- POC CVE-2021-29490: Jellyfin 10.7.2 - Server Side Request Forgery
- POC CVE-2022-38463: ServiceNow - Cross-Site Scripting
- POC CVE-2022-39048: ServiceNow - Cross-site Scripting
- POC CVE-2024-4879: ServiceNow UI Macros - Template Injection
- POC CVE-2024-5217: ServiceNow - Incomplete Input Validation
- POC CVE-2021-21402: Jellyfin prior to 10.7.0 Unauthenticated Arbitrary File Read
- POC servicenow-kbcprod-csp-bypass: Content-Security-Policy Bypass - ServiceNow KBCProd
- POC jellyfin-default-login: Jellyfin Console - Default Login
- POC servicenow-widget-misconfig: ServiceNow Widget-Simple-List - Misconfiguration
- POC servicenow-helpdesk-credential: ServiceNow Helpdesk Credential Exposure
- ServiceNow Now Platform 未授权 代码注入漏洞
- ServiceNow CVE-2024-4879 Jelly模板注入漏洞