Back to Database
Status published
Medium
CVE-2025-48740
A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0...
Vulnerability Description
A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48740
Credits & Attribution
No credits recorded in the NVD database.
References
More from StrangeBee
View All →CVE-2025-48741
A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before...
Medium
6.8
CVE-2025-48739
A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0...
Medium
4.6
CVE-2025-48738
An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16,...
Medium
6.9
Affected Vendor
StrangeBee
View all reports →Affected Software
TheHive
Vulnerable Versions:
5.2.0, 5.3.0, 5.4.0, 5.5.0
Timeline
Official Publish:
May 23rd, 2025
Last Modified:
May 23rd, 2025
Added to House:
July 22nd, 2026