Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: StrangeBee TheHive 5.2.16, 5.3.11 and 2 more versions Clear all filters
TI-2025-30960 CVE-2025-48740 · GHSA-cc6v-6w77-q59h

Cross-site request forgery in StrangeBee TheHive

Priority LOW 26

A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's…

CVSS 4.0MEDIUM 5.9 Network No auth User interaction EPSS 0.00275 Published 2025-05-23 Fixed in 5.2.16, 5.3.11 +2 CWE-352
TI-2025-30959 CVE-2025-48739 · GHSA-w62p-cm3c-7rfc

Server-side request forgery in StrangeBee TheHive

Priority LOW 22

A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows remote authenticated attackers with admin permissions…

CVSS 4.0MEDIUM 4.6 Network High privileges User interaction EPSS 0.00435 Published 2025-05-23 Fixed in 5.2.16, 5.3.11 +2 CWE-918
TI-2025-30958 CVE-2025-48738 · GHSA-8hx5-5mh4-xhjv

Resource allocation without limits in StrangeBee TheHive

Priority LOW 37

An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote attackers to use the password reset feature witho…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00533 Published 2025-05-23 Fixed in 5.2.16, 5.3.11 +2 CWE-770