CVE-2021-3210

PoC ×3—

CVSS 3.1

9.6 critical

EPSS

3%p85

Published

Feb 19, 2021 (Feb 19, 2021)

Modified

Jun 17, 2026

Description

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter.

Vendors: bloodhound project
Products: bloodhound
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.