CVE-2025-48738 - CVE House
Back to Database
Status published Medium CVE-2025-48738

An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16,...

Vulnerability Description

An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows unauthenticated remote attackers to use the password reset feature without limits. This can lead to several consequences, including mailbox storage exhaustion for targeted users, reputation damage to the SMTP server, potentially causing it to be blacklisted, and overload of the SMTP server's outbound mail queue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48738

Credits & Attribution

No credits recorded in the NVD database.

References

More from StrangeBee

View All →
CVE-2025-48741
A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before...
Medium 6.8
CVE-2025-48740
A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0...
Medium 5.9
CVE-2025-48739
A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0...
Medium 4.6

Affected Vendor

Affected Software

TheHive
Vulnerable Versions:
5.2.0, 5.3.0, 5.4.0, 5.5.0

Timeline

Official Publish: May 23rd, 2025
Last Modified: May 23rd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-770

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1562 Impair Defenses
Defense Evasion
T1046 Network Service Discovery
Discovery