CVE-2024-4879 PoC — Jelly Template Injection Vulnerability in ServiceNow UI Macros

Source

https://github.com/zgimszhd61/CVE-2024-4879

Associated Vulnerability

Title:Jelly Template Injection Vulnerability in ServiceNow UI Macros (CVE-2024-4879)
Description:ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Readme

# CVE-2024-4879 - ServiceNow的Jelly模板注入漏洞
 - ServiceNow是一家上市公司。该公司于2012年6月在纽约证券交易所（NYSE）上市，股票代码为NOW。ServiceNow是一家提供企业云计算解决方案的公司，专注于数字工作流程的自动化和管理
 - ServiceNow修复了在Vancouver和Washington DC Now Platform版本中发现的输入验证漏洞。这个漏洞可能允许未认证的用户在Now Platform中远程执行代码。ServiceNow已经对托管实例进行了更新，并将更新发布给合作伙伴和自托管客户。以下是修复该漏洞的补丁和热修复。如果您还没有应用相关的安全补丁，建议尽快进行。

## 使用方法
nuclei -t servicenow.yaml -l targets.txt


## 参考资料
 - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154
 - https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1644293
 - https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data

File Snapshot


 [4.0K]  /data/pocs/3e784d7f4952734c20f9147c35a2fed7fae22d0e
├── [ 11K]  LICENSE
├── [1.0K]  README.md
└── [ 854]  servicenow.yaml

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!