Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-8923

Sandbox Escape in Now Platform

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SN

Description

ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow deployed an update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. Further, the vulnerability is addressed in the listed patches and hot fixes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ServiceNow Now Platform

Default version status: unaffected

  • 0 to < Vancouver Patch 9 Hot Fix 2aaffected
  • 0 to < Vancouver Patch 10affected
  • 0 to < Washington DC Patch 4 Hot Fix 1aaffected
  • 0 to < Washington DC Patch 5affected
  • 0 to < Xanadu GA Releaseaffected

References