CVE-2018-19855: Medium severity uipath orchestrator vulnerability
Published Aug 8, 2019
·Updated
UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.
Affected Software
1 affected component
UiPath Orchestrator<2018.3.4
Event History
Aug 8, 2019
CVE Published
via MITRE·12:56 PM
Data Sourced
via MITRE·12:56 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-19855?
CVE-2018-19855 is classified as a medium severity vulnerability due to the potential for CSV Injection.
2
How do I fix CVE-2018-19855?
To fix CVE-2018-19855, upgrade your UiPath Orchestrator to version 2018.3.4 or later.
3
What features are affected by CVE-2018-19855?
CVE-2018-19855 affects the Audit export, Robot log export, and Transaction log export features in UiPath Orchestrator.
4
What types of attacks can be executed due to CVE-2018-19855?
CVE-2018-19855 can allow attackers to execute arbitrary code through malicious CSV files.
5
Who is at risk due to CVE-2018-19855?
Organizations using affected versions of UiPath Orchestrator prior to 2018.3.4 are at risk due to CVE-2018-19855.