writeups.xyz / Chaining Three Bugs to Access All Your ServiceNow Data

Submitter : c2a

Date: 11 July 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSTI
• Security Code Review

Programs :

• ServiceNow

Authors :

• Adam Kues (@Hash_kitten)

Link :
https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data