CVE:CVE-2023-1298
CNNVD:CNNVD-202303-2794
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。
ServiceNow存在安全漏洞。攻击者利用该漏洞能够注入任意脚本。
solution:Upgrade servicenow servicenow to a higher version than san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7_hotfix_1,san_diego:patch_7_hotfix_2,san_diego:patch_7_hottix_3,san_diego:patch_7a,san_diego:patch_7b,san_diego:patch_8,san_diego:patch_8_hotfix_1,san_diego:patch_8_hotfix_2,san_diego:patch_9,san_diego:patch_9a,san_diego:patch_9a_hotfix_1,san_diego:patch_9b,tokyo,tokyo:patch_1,tokyo:patch_1_hotfix_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_2_hotfix_1,tokyo:patch_2_hotfix_2,tokyo:patch_2_hotfix_3,tokyo:patch_2_hotfix_4,tokyo:patch_3,tokyo:patch_3_hotfix_1,tokyo:patch_3_hotfix_2,tokyo:patch_3_hotfix_3,tokyo:patch_3_hotfix_4,tokyo:patch_4,tokyo:patch_4_hotfix_2,tokyo:patch_4_hotfix_3,tokyo:patch_4a,tokyo:patch_4a_hotfix_1,tokyo:patch_5,tokyo:patch_5_hotfix_1,tokyo:patch_5_hotfix_2,tokyo:patch_5_hotfix_3,utah:patch1,and avoid the version san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_4b,san_diego:patch_5,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7_hotfix_1,san_diego:patch_7_hotfix_2,san_diego:patch_7_hottix_3,san_diego:patch_7a,san_diego:patch_7b,san_diego:patch_8,san_diego:patch_8_hotfix_1,san_diego:patch_8_hotfix_2,san_diego:patch_9,san_diego:patch_9a,san_diego:patch_9a_hotfix_1,san_diego:patch_9b,tokyo,tokyo:patch_1,tokyo:patch_1_hotfix_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_2_hotfix_1,tokyo:patch_2_hotfix_2,tokyo:patch_2_hotfix_3,tokyo:patch_2_hotfix_4,tokyo:patch_3,tokyo:patch_3_hotfix_1,tokyo:patch_3_hotfix_2,tokyo:patch_3_hotfix_3,tokyo:patch_3_hotfix_4,tokyo:patch_4,tokyo:patch_4_hotfix_2,tokyo:patch_4_hotfix_3,tokyo:patch_4a,tokyo:patch_4a_hotfix_1,tokyo:patch_5,tokyo:patch_5_hotfix_1,tokyo:patch_5_hotfix_2,tokyo:patch_5_hotfix_3,utah:patch1