CVE-2024-4879 PoC — Jelly Template Injection Vulnerability in ServiceNow UI Macros

Source

https://github.com/NoTsPepino/CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning

Associated Vulnerability

Title:Jelly Template Injection Vulnerability in ServiceNow UI Macros (CVE-2024-4879)
Description:ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted instances, and ServiceNow released the update to our partners and self-hosted customers. Listed below are the patches and hot fixes that address the vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.

Description

CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.

Readme

# CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning
CVE-2024-4879 &amp; CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei &amp; Shodan Dork to find it.

## Resource Vuln Info
https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data

## Usage
```nuclei -t CVE-2024-4879-Detect-Database-ServiceNow.yaml -l TargetList.txt```

```nuclei -t CVE-2024-4879-Detect-Multiplication-ServiceNow.yaml -l TargetList.txt```

```nuclei -t CVE-2024-5217-Detect-Incomplete-Input-Validation-ServiceNow.yaml -l TargetList.txt```


## Shodan Dork

```server: ServiceNow "200"```

File Snapshot


 [4.0K]  /data/pocs/aa1c54aa00aa5a4fcd0dabeb5b0caacc1a06ea3e
├── [1.2K]  CVE-2024-4879-Detect-Database-ServiceNow.yaml
├── [ 858]  CVE-2024-4879-Detect-Multiplication-ServiceNow.yaml
├── [2.2K]  CVE-2024-5217-Detect-Incomplete-Input-Validation-ServiceNow.yaml
└── [ 603]  README.md

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!