Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
StrangeBee TheHive 5.1.0 to 5.1.9 and 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case attachment functionality which enables an attacker to upload a malicious HTML file with Javascript code that will be executed in the context of the The Hive application using a specific URL. The vulnerability can be used to coerce a victim account to perform specific actions on the application as helping an analyst becoming administrator.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
StrangeBee TheHive 安全漏洞
Vulnerability Description
TheHive是一套可扩展的开源安全事件响应平台。 StrangeBee TheHive 5.1.0版本至5.1.9版本、5.2.0版本至5.2.8版本存在安全漏洞。攻击者利用该漏洞可以上传带有 Javascript 代码的恶意 HTML 文件。
CVSS Information
N/A
Vulnerability Type
N/A