Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
StrangeBee TheHive 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case reporting functionality. This feature allows an attacker to insert malicious JavaScript code inside the template or its variables, that will be executed in the context of the TheHive application when the HTML report is opened.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
StrangeBee TheHive 安全漏洞
Vulnerability Description
TheHive是一套可扩展的开源安全事件响应平台。 StrangeBee TheHive 5.2.0版本至5.2.8版本存在安全漏洞。攻击者利用该漏洞在模板或其变量中插入恶意 JavaScript 代码。
CVSS Information
N/A
Vulnerability Type
N/A