ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.
Advisories
Source ID Title
EUVD EUVD EUVD-2023-23561 ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 17 Dec 2024 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:servicenow:servicenow:utah:patch1:*:*:*:*:*:* cpe:2.3:a:servicenow:servicenow:utah:patch_1:*:*:*:*:*:*

Mon, 21 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: SN

Published:

Updated: 2024-10-21T21:11:09.595Z

Reserved: 2023-03-09T19:33:01.065Z

Link: CVE-2023-1298

cve-icon Vulnrichment

Updated: 2024-08-02T05:40:59.973Z

cve-icon NVD

Status : Modified

Published: 2023-07-06T18:15:10.497

Modified: 2024-12-17T13:58:11.560

Link: CVE-2023-1298

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.