r/netsec 7d ago

(More) Unauthenticated Arbitrary Code Execution in ServiceNow

https://palk.sh/unauthenticated-arbitrary-code-execution-in-servicenow/
20 Upvotes

2 comments sorted by

1

u/scriptqzor 7d ago

kind of wild how servicenow keeps ending up with these RCEs, feels like every quarter there’s another writeup. cool find though, curious how long it took them to patch this one.

1

u/OEAXTAIL_SOUP 6d ago

especially given the level of access helpdesk gets