Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-4879 PoC — Jelly Template Injection Vulnerability in ServiceNow UI Macros

Source
https://github.com/Praison001/CVE-2024-4879-ServiceNow
Associated Vulnerability
Title:Jelly Template Injection Vulnerability in ServiceNow UI Macros (CVE-2024-4879)
Description:ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.
Description
Exploit for CVE-2024-4879 affecting Vancouver, Washington DC Now and Utah Platform releases
Readme
# CVE-2024-4879-ServiceNow
**ServiceNow** is a platform for business transformation which helps companies manage digital workflows for enterprise operations.

**CVE-2024-4879** could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by chaining them together: Title Injection, Template Injection Mitigation Bypass, and Filesystem Filter Bypass, to access ServiceNow data.

The affected versions include Vancouver, Washington DC Now and Utah platform releases

**Usage:** python3 exploit.py -i < target_IP >

**Usage example:** python3 exploit.py -i 127.0.0.1

**Disclaimer: This exploit is to be used only for educational and authorized testing purposes. Illegal/unauthorized use of this exploit is prohibited. I am not responsible for any misuse or damage caused by this script.**

**References:** https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data
File Snapshot

 [4.0K]  /data/pocs/7f7911c5f58c8a5a84e8339e936a54eee6d56642
├── [5.7K]  exploit.py
└── [ 969]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →