Description (CNA)
A XSS vulnerability was identified in the ServiceNow UI page assessment_redirect. To exploit this vulnerability, an attacker would need to persuade an authenticated user to click a maliciously crafted URL. Successful exploitation potentially could be used to conduct various client-side attacks, including, but not limited to, phishing, redirection, theft of CSRF tokens, and use of an authenticated user's browser or session to attack other systems.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Servicenow / Now Platform | affected Tokyo before Patch 1a; affected San Diego before Patch 7b; affected Rome before Patch 10 Hotfix 2b; affected Quebec before Patch 10 Hotfix 10b |
CWE
No CWE identifiers supplied.
References
- https://support.servicenow.com/
- https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1221892
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.