ServiceNow Remote Code Execution Attack

FortiGuard Labs reports active attack attempts against three ServiceNow Now Platform vulnerabilities (CVE-2024-4879, CVE-2024-5178, CVE-2024-5217) — including Jelly Template Injection and incomplete input validation bugs that can enable remote code execution and unauthorized access. The flaws affect multiple Now Platform releases, are reportedly being targeted in the wild with potential PoC weaponization, and organizations using ServiceNow are advised to apply the vendor updates immediately to mitigate potential data breaches.