Released for ServiceNow on August 5, 2024
In this release, we've resolved the following issues:
Security
- XLT-4822 - Ability to read and write files to an Exalate node.
André Antunes from Nviso, our seasoned external pentester, found the issue that through the scripting facilities provided by Exalate, it was possible to read/write files in the environment. This security vulnerability has been addressed.
Improvements
- XLT-5617 - Improve look and feel of the Archival notification email.