Description (CNA)
There exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ServiceNow / ServiceNow | affected Tokyo before Tokyo Patch 1b; affected San Diego before San Diego Patch 7b; affected Rome before Rome Patch 10 Hotfix 2b; affected Quebec before Quebec Patch 10 Hotfix 10b |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.