Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Bloodhound Project Component: Bloodhound Clear all filters
TI-2021-02276 CVE-2021-3210 · GHSA-4374-j4qr-5p28

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows…

Priority MEDIUM 46

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectI…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02697 Published 2021-02-19 No fix listed CWE-79
TI-2019-11783 CVE-2019-15701 · GHSA-229q-863f-g82c

components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute…

Priority MEDIUM 42

components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary OS commands (by spawning a child process as the current user on the victim's machine) when the search function's autocomple…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0198 Published 2019-08-27 No fix listed CWE-78