CVE-2018-17305

UiPath Orchestrator through 2018.2.4 allows any authenticated user to change the information of arbitrary users even administrators leading to privilege escalation and remote code execution...

CVE-2018-17305

The connected sources confirm CVE-2018-17305 affects UiPath Orchestrator up to version 2018.2.4, where any authenticated user can_change the information of arbitrary users (including administrators), enabling privilege escalation and remote code execution. The exact root cause detail is not elabo...