New vulnerability on the NVD: CVE-2019-20768

0

0

ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do.

Published at: May 05, 2020 at 06:15PM
View on website

John Jason Fallows

See author's posts