CVE-2017-18376

The Hive vulnerability CVE-2017-18376 is an improper authorization check in the User API (app/controllers/UserCtrl.scala) that lets users with read-only or read/write access escalate to administrator privileges. Affected versions are TheHive before 2.13.4 and 3.x before 3.3.1. Impact details indi...

CVE-2023-39069

The CVE-2023-39069 entry affects StrangeBee TheHive and Cortex components: TheHive versions 4.1.21–5.0.8 and Cortex 3.1.6. The issue enables a remote attacker to gain privileges via the Active Directory authentication mechanism. All sources describe a privilege escalation through AD auth, but no ...

CVE-2024-22877

TheHive 5.2.0–5.2.8 is vulnerable to Cross-Site Scripting (XSS) in the case reporting feature. The issue allows an attacker to insert malicious JavaScript into the template or its variables, which executes in the TheHive application's context when the HTML report is opened. Root cause and exact i...

CVE-2024-22876

CVE-2024-22876 – TheHive (StrangeBee) vulnerable versions: 5.1.0–5.1.9 and 5.2.0–5.2.8. The issue is a Cross Site Scripting (XSS) in the case attachment functionality, allowing an attacker to upload a malicious HTML file with JavaScript that executes in the TheHive application context via a speci...

CVE-2026-63098

The Hive 4.1.24 has an unauthenticated information-disclosure flaw exposed via GET /api/status (StatusCtrl.scala), enabling attackers without credentials to read sensitive configuration data. Affected items include the datastore attachment protection password, configured authentication providers,...