SNOW-22.1: SSRF via Dynamic RESTMessageV2 Endpoint

🚨 Critical · ServiceNow SSRF

Detects agent scripts using sn_ws.RESTMessageV2 with dynamic endpoint parameters derived from user input, enabling SSRF against internal services.

Details

Field	Value
Rule ID	SNOW-22.1
Severity	Critical
Category	ServiceNow SSRF
Platforms	servicenow

Remediation

Refer to the SquireX documentation for remediation guidance specific to SNOW-22.1.

See Also

• Rule catalog index
• SquireX scan documentation