Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
HTML Injection in the Assessment plugin
Vulnerability Description
ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website. ServiceNow released updates to customers that addressed this vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance(s) as soon as possible.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
ServiceNow Now Platform 安全漏洞
Vulnerability Description
ServiceNow Now Platform是美国ServiceNow公司的一个基于云的平台，使用 AI 和机器学习来自动化和优化整个企业的工作。 ServiceNow Now Platform存在安全漏洞，该漏洞源于存在HTML注入漏洞，可能使未经身份验证的用户能够修改网页或将用户重定向到另一个网站。
CVSS Information
N/A
Vulnerability Type
N/A