Description
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.
Unscored
CVE-2018-17305
EUVD-2018-9060GHSA-jxff-ff33-h6fp
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leadi…
Published Apr 11, 2019 · Updated Aug 5, 2024 · Assigned by mitre