Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-4879 PoC — Jelly Template Injection Vulnerability in ServiceNow UI Macros

Source
https://github.com/ShadowByte1/CVE-2024-4879
Associated Vulnerability
Title:Jelly Template Injection Vulnerability in ServiceNow UI Macros (CVE-2024-4879)
Description:ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.
Readme
# CVE-2024-4879

SSRF Pingback to easily confirm whether the target is vulnerable or not.
File Snapshot

 [4.0K]  /data/pocs/4aca5490f5d1d6e0d2ff6ad2a3043025dc21763d
├── [  90]  README.md
└── [1.7K]  Service-Now-Pingback.yaml

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →