uipath-planner
Warn
Audited by Socket on Oct 26, 2026
1 alert found:
AnomalyAnomalyassets/templates/case/sdd-viewer.html
LOWAnomalyLOW
assets/templates/case/sdd-viewer.html
This file is an offline SDD data viewer and shows no network exfiltration, credential access, process execution, or destructive behavior. It has a conditional XSS risk: untrusted SDD data can inject HTML through unescaped trigger mapping values, and unsafe serialization into the embedded script element can enable script injection. Severity is moderate when the data or generated HTML can be attacker-controlled; otherwise no malicious behavior is evident.
Confidence: 98%Severity: 55%
Audit Metadata