Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2024-5890

HTML Injection in the Assessment plugin

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SN

Description

ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website. ServiceNow released updates to customers that addressed this vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance(s) as soon as possible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ServiceNow Now Platform

Default version status: unaffected

  • 0 to < Utah Patch 8 Hot Fix 1affected
  • 0 to < Vancouver Patch 10affected
  • 0 to < Vancouver Patch 9affected
  • 0 to < Washington DC Early Accessaffected

References