{"cvss":9.8,"datePublished":"2024-07-23T00:00:00Z","dateUpdated":"2024-07-23T00:00:00Z","description":"ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. ","dueDate":"2024-08-19T00:00:00Z","id":"CVE-2024-4879","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Utah, Vancouver, and Washington DC Now Platform","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"ServiceNow Improper Input Validation Vulnerability","vendor":"ServiceNow"}