CVE:CVE-2022-38172
CNNVD:CNNVD-202208-3782
ServiceNow San Diego Patch是美国ServiceNow公司的一系列补丁程序。
ServiceNow San Diego Patch 3及之前版本存在跨站脚本漏洞，该漏洞源于允许在创建性能分析仪表板的新仪表板时通过名称字段进行XSS。
solution:Upgrade servicenow servicenow to a higher version than san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,and avoid the version san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3