CVE-2024-5890 - HTML Injection in the Assessment Plugin - Security

CVE-2024-5890 - HTML Injection in the Assessment Plugin  ServiceNow Posture December, 2024 Description ServiceNow has addressed an HTML injection vulnerability that was identified in the Now Platform. This vulnerability could potentially enable an unauthenticated user to modify a web page or redirect users to another website.

Resolution ServiceNow released updates (listed below) to customers that addressed this vulnerability. If you have not done so already, we recommend applying security patches relevant to your instance(s) as soon as possible.

Release Fixed Version Utah

Utah Patch 8 Hot Fix 1

Vancouver

Vancouver Patch 10

Vancouver Patch 9

Washington

Washington DC Early Access

Additional Resources For more details, please see the following resource:

https://www.cve.org/CVERecord?id=CVE-2024-5890 Change Log Version Published Summary of Changes 1.0 December 2, 2024 Initial publication