CVE-2018-7748

report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:servicenow:servicenow:jakarta:*:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p1:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p2:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p3:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p3a:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p3b:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p4:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p5:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p6:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p6a:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p7:*:*:*:*:*:*
cpe:2.3:a:servicenow:servicenow:jakarta:p8:*:*:*:*:*:*

History

21 Nov 2024, 04:12

Type Values Removed Values Added
References () https://telekomsecurity.github.io/2018/07/servicenow-privilege-escalation.html - Exploit, Third Party Advisory () https://telekomsecurity.github.io/2018/07/servicenow-privilege-escalation.html - Exploit, Third Party Advisory
References () https://telekomsecurity.github.io/assets/advisories/20180104_ServiceNow_GlideInjection.txt - Exploit, Third Party Advisory () https://telekomsecurity.github.io/assets/advisories/20180104_ServiceNow_GlideInjection.txt - Exploit, Third Party Advisory

Information

Published : 2018-08-03 18:29

Updated : 2024-11-21 04:12


NVD link : CVE-2018-7748

Mitre link : CVE-2018-7748

CVE.ORG link : CVE-2018-7748


JSON object : View

Products Affected

servicenow

  • servicenow
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')