mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-11 00:14:52 +02:00
763 B
763 B
CVE-2021-3210
Description
components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter.
POC
Reference
- https://github.com/BloodHoundAD/BloodHound/issues/338
- https://github.com/BloodHoundAD/BloodHound/issues/338
Github
No PoCs found on GitHub currently.