Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
components/Modals/HelpModal.jsx in BloodHound 2.2.0 allows remote attackers to execute arbitrary OS commands (by spawning a child process as the current user on the victim's machine) when the search function's autocomplete feature is used. The victim must import data from an Active Directory with a GPO containing JavaScript in its name.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BloodHound 操作系统命令注入漏洞
Vulnerability Description
BloodHound是一款通过图论揭示Active Directory环境中的隐藏关系和攻击路径的JavaScript应用程序。 BloodHound 2.2.0版本中的components/Modals/HelpModal.jsx文件存在操作系统命令注入漏洞。远程攻击者可利用该漏洞执行任意操作系统命令。
CVSS Information
N/A
Vulnerability Type
N/A