CVE-2025-48740

Name of the Vulnerable Software and Affected Versions StrangeBee TheHive versions 5.2.0 through 5.2.15 StrangeBee TheHive versions 5.3.0 through 5.3.10 StrangeBee TheHive versions 5.4.0 through 5.4.9 StrangeBee TheHive versions 5.5.0

Description A Cross-Site Request Forgery (CSRF) issue allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic authentication.

Recommendations For versions 5.2.0 through 5.2.15, update to version 5.2.16 or later. For versions 5.3.0 through 5.3.10, update to version 5.3.11 or later. For versions 5.4.0 through 5.4.9, update to version 5.4.10 or later. For version 5.5.0, update to version 5.5.1 or later.