CVE-2025-48741

creationtimestamp| type| source ---|---|--- 2025-05-23 20:49:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17473 2025-05-23 21:39:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpuls4n2va2s...

CVE-2025-48741

CVE-2025-48741 affects StrangeBee TheHive. A Broken Access Control flaw allows remote, authenticated, and unprivileged users to retrieve alerts, cases, logs, observables, or tasks via a specific API endpoint. Affected ranges and fixes: 5.2.0–5.2.15 → upgrade to 5.2.16+, 5.3.0–5.3.10 → upgrade to ...