PT-2024-19595 · Strangebee · Thehive

Published 2024-01-19 · Updated 2024-01-25 · CVE-2024-22877

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions StrangeBee TheHive versions 5.2.0 through 5.2.8

Description The case reporting functionality in StrangeBee TheHive is susceptible to Cross Site Scripting (XSS), allowing an attacker to insert malicious JavaScript code inside the template or its variables. This code will be executed in the context of the TheHive application when the HTML report is opened.

Recommendations For versions 5.2.0 through 5.2.8, consider disabling the case reporting functionality until a patch is available to prevent the execution of malicious JavaScript code. Restrict access to the case reporting feature to minimize the risk of exploitation. Avoid using variables that can be manipulated by an attacker in the HTML report template. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-22877

Affected Products

Thehive

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-22877 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22877 · Vendor Advisory
• https://github.com/StrangeBeeCorp/Security/blob/main/Security%20advisories/SB-SEC-ADV-2023-001.md · Note
• https://t.me/cvenotify/68708 · Telegram Post
• https://twitter.com/CVEnew/status/1748352362669080964 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1748372647363117073 · Twitter Post