CVE:CVE-2023-1209
CNNVD:CNNVD-202305-2051
ServiceNow是美国ServiceNow公司的一个云计算平台。以帮助公司管理企业运营的数字工作流程。
ServiceNow存在安全漏洞。攻击者利用该漏洞可以注入任意脚本。
solution:Upgrade servicenow servicenow to a higher version than rome,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_10,rome:patch_10_hotfix_1,rome:patch_10_hotfix_2,rome:patch_10_hotfix_2a,rome:patch_10_hotfix_2b,rome:patch_10_hotfix_3b,rome:patch_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7_hotfix_1,san_diego:patch_7_hotfix_2,san_diego:patch_7_hottix_3,san_diego:patch_7a,san_diego:patch_7b,san_diego:patch_8,san_diego:patch_8_hotfix_1,san_diego:patch_8_hotfix_2,san_diego:patch_9,tokyo,tokyo:patch_1,tokyo:patch_1_hotfix_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_2_hotfix_1,tokyo:patch_2_hotfix_2,tokyo:patch_2_hotfix_3,tokyo:patch_2_hotfix_4,tokyo:patch_3,tokyo:patch_3_hotfix_1,tokyo:patch_3_hotfix_2,tokyo:patch_3_hotfix_3,tokyo:patch_3_hotfix_4,tokyo:patch_4,utah,and avoid the version rome,rome:patch_1,rome:patch_1_hotfix_1,rome:patch_1_hotfix_1a,rome:patch_1_hotfix_1b,rome:patch_1_hotfix_2,rome:patch_10,rome:patch_10_hotfix_1,rome:patch_10_hotfix_2,rome:patch_10_hotfix_2a,rome:patch_10_hotfix_2b,rome:patch_10_hotfix_3b,rome:patch_2,rome:patch_3,rome:patch_3_hotfix_1,rome:patch_4,rome:patch_4_hotfix_1,rome:patch_4_hotfix_1a,rome:patch_4_hotfix_1b,rome:patch_5,rome:patch_5_hotfix_1,rome:patch_5_hotfix_2,rome:patch_6,rome:patch_6_hotfix_1,rome:patch_6_hotfix_2,rome:patch_7_hotfix_1,rome:patch_7a,rome:patch_7b,rome:patch_8,rome:patch_8_hotfix_1,rome:patch_8_hotfix_2,rome:patch_9,rome:patch_9_hotfix_1,rome:patch_9a,rome:patch_9b,san_diego,san_diego:patch_1,san_diego:patch_1_hotfix_1,san_diego:patch_1_hotfix_1a,san_diego:patch_1_hotfix_1b,san_diego:patch_2,san_diego:patch_2_hotfix_1,san_diego:patch_3,san_diego:patch_3_hotfix_1,san_diego:patch_3_hotfix_2,san_diego:patch_3_hotfix_3,san_diego:patch_3_hotfix_4,san_diego:patch_4,san_diego:patch_4a,san_diego:patch_6,san_diego:patch_7,san_diego:patch_7_hotfix_1,san_diego:patch_7_hotfix_2,san_diego:patch_7_hottix_3,san_diego:patch_7a,san_diego:patch_7b,san_diego:patch_8,san_diego:patch_8_hotfix_1,san_diego:patch_8_hotfix_2,san_diego:patch_9,tokyo,tokyo:patch_1,tokyo:patch_1_hotfix_1,tokyo:patch_1a,tokyo:patch_1b,tokyo:patch_2,tokyo:patch_2_hotfix_1,tokyo:patch_2_hotfix_2,tokyo:patch_2_hotfix_3,tokyo:patch_2_hotfix_4,tokyo:patch_3,tokyo:patch_3_hotfix_1,tokyo:patch_3_hotfix_2,tokyo:patch_3_hotfix_3,tokyo:patch_3_hotfix_4,tokyo:patch_4,utah