Back to Database
Status published
Medium
CVE-2025-48741
A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before...
Vulnerability Description
A Broken Access Control vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, and 5.4.0 before 5.4.10 allows remote, authenticated, and unprivileged users to retrieve alerts, cases, logs, observables, or tasks, regardless of the user's permissions, through a specific API endpoint.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48741
Credits & Attribution
No credits recorded in the NVD database.
References
More from StrangeBee
View All →CVE-2025-48740
A Cross-Site Request Forgery (CSRF) vulnerability in StrangeBee TheHive 5.2.0...
Medium
5.9
CVE-2025-48739
A Server-Side Request Forgery (SSRF) vulnerability in StrangeBee TheHive 5.2.0...
Medium
4.6
CVE-2025-48738
An e-mail flooding vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16,...
Medium
6.9
Affected Vendor
StrangeBee
View all reports →Affected Software
TheHive
Vulnerable Versions:
5.2.0, 5.3.0, 5.4.0
Timeline
Official Publish:
May 23rd, 2025
Last Modified:
May 23rd, 2025
Added to House:
July 22nd, 2026