Advisories · Technology

StrangeBee TheHive.

Every CVE that names StrangeBee TheHive among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48741 CVE record

CVSS 6.8 Medium

StrangeBee TheHive: A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16…
- StrangeBee TheHive
- Privilege escalation
Not analysed yet 23 May 2025
CVE-2025-48740 CVE record

CVSS 5.9 Medium

Cross-site request forgery in StrangeBee TheHive
- StrangeBee TheHive
- Cross-site request forgery (CSRF)
Not analysed yet 23 May 2025
CVE-2025-48739 CVE record

CVSS 4.6 Medium

Server-side request forgery in StrangeBee TheHive
- StrangeBee TheHive
- Server-side request forgery (SSRF)
Not analysed yet 23 May 2025
CVE-2025-48738 CVE record

CVSS 6.9 Medium

Resource allocation without limits in StrangeBee TheHive
- StrangeBee TheHive
- Denial of service
Not analysed yet 23 May 2025