CVE-2021-3210: Bloodhound Project Bloodhound

Critical severity, CVSS 9.6. EPSS: 2.7% chance of exploitation in the next 30 days.

components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter.

Affected products

• Bloodhound Project Bloodhound: up to and including 4.0.1

Published 2021-02-19. Last modified 2026-06-17.