medium4.3
CVE-2023-1298
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris La…
Impact
ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Servicenow | Servicenow | Versions san_diego, tokyo, utah |