← Database

CVE-2023-1298

MEDIUM CVSS: 4.3 Published: 2023-07-06 Modified: 2026-06-17

Description

ServiceNow has released upgrades and patches that address a Reflected Cross-Site scripting (XSS) vulnerability that was identified in the ServiceNow Polaris Layout. This vulnerability would enable an authenticated user to inject arbitrary scripts.

Affected Platforms

Servicenow Servicenow

Weakness Type

CWE-79, CWE-79

References