CVE-2018-19855 - UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features

MEDIUM

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features

Published Aug 8, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 1.09%

UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features.

No remediation recorded yet.

Weaknesses (1)

CWE-1236

Link	Providers	Tags
https://www.uipath.com/product/release-notes		x_refsource_MISCRelease NotesVendor Advisory
https://www2.deloitte.com/de/de/pages/risk/articles/uipath-orchestrator-csv-injection.html		x_refsource_MISCExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Aug 8, 2019

Updated Aug 5, 2024

Reserved Dec 5, 2018

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a