Description
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scripting Injection in the sysparm_media parameter.
Unscored
CVE-2018-7748
EUVD-2018-19463GHSA-jr5p-cp4r-9w3c
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '${xyz}' Glide Scr…
Published Aug 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre