CVE-2021-44042
Published Dec 14, 2021An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encod…
Vendor/product archive
2 CVEs tagged to uipath / assistant — 2 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.
An issue was discovered in UiPath Assistant 21.4.4. User-controlled data supplied to the --process-start argument of the URI handler for uipath-assistant:// is not correctly encod…
UiPath Assistant 21.4.4 will load and execute attacker controlled data from the file path supplied to the --dev-widget argument of the URI handler for uipath-assistant://. This al…