TheHive Project Cortex < 1.15.2 - Server-Side Request Forgery Vulnerability

Exploit for multiple platform in category web applications Exploit Title: SSRF in TheHive Project Cortex = 2.1.3 Exploit Author: Alexandre Basquin Vendor Homepage: https://blog.thehive-project.org Software Link: https://github.com/TheHive-Project/Cortex Version: Cortex = 2.1.3 Tested on: 2.1.3 CV...

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

CVE-2018-20226

The vulnerability CVE-2018-20226 affects THEHIVE PROJECT Cortex up to version 2.1.3, caused by not overriding Role.toString. This enables an organization administrator to add a super administrator (privilege escalation). Exploitation details are not provided in the supplied documents. Remediation...

CVE-2018-20226

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

CVE-2018-20226: Undefined Security Weakness

An organization administrator can add a super administrator in THEHIVE PROJECT Cortex before 2.1.3 due to the lack of overriding the Role.toString method...

PT-2018-15294

Name of the Vulnerable Software and Affected Versions THEHIVE PROJECT Cortex versions prior to 2.1.3 Description The issue arises from the lack of overriding the Role.toString method, allowing an organization administrator to add a super administrator. Recommendations For versions prior to 2.1.3,...