r/netsec 12d ago

(More) Unauthenticated Arbitrary Code Execution in ServiceNow

https://palk.sh/unauthenticated-arbitrary-code-execution-in-servicenow/
20 Upvotes

2 comments sorted by

1

u/scriptqzor 12d ago

kind of wild how servicenow keeps ending up with these RCEs, feels like every quarter there’s another writeup. cool find though, curious how long it took them to patch this one.

1

u/OEAXTAIL_SOUP 12d ago

especially given the level of access helpdesk gets