CVE-2025-48740 - A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication

Back Back to CVE browser

MEDIUM

A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication

Published May 23, 2025

5.9

MEDIUM

CVSS 4.0

EPSS 0.26%

Description

A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication.

Affected products

Vendor StrangeBee Product TheHive Default
unaffected
- Version
  5.2.0
  Status
  affected
  Constraints
  <5.2.16
- Version
  5.3.0
  Status
  affected
  Constraints
  <5.3.11
- Version
  5.4.0
  Status
  affected
  Constraints
  <5.4.10
- Version
  5.5.0
  Status
  affected
  Constraints
  <5.5.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

StrangeBee

TheHive

unaffected

Version	Status	Constraints
5.2.0	affected	<5.2.16
5.3.0	affected	<5.3.11
5.4.0	affected	<5.4.10
5.5.0	affected	<5.5.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28247		Advisory
https://github.com/StrangeBeeCorp/Security/blob/main/Security%20advisories/SB-SEC-ADV-2025-001.md