Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.50%
Published
Apr 11, 2019
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.
Weaknesses (CWE)
Affected Products (1)
References (2)