CVE-2018-17305

UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users (even administrators) leading to privilege escalation and remote code execution.

Date published : 2019-04-11

https://www.uipath.com/product/release-notes/uipath-v2018.1.7