Lucene search
PRIOn knowledge basePRION:CVE-2024-22876HistoryJan 19, 2024 - 2:15 p.m.
Cross site scripting
2024-01-1914:15:00
PRIOn knowledge base
www.prio-n.com
7
strangebee thehive
version 5.1.0
version 5.1.9
version 5.2.0
version 5.2.8
cross site scripting
xss
attachment functionality
malicious html
javascript
the hive application
specific url
coerce victim account
analyst
administrator
nvd
StrangeBee TheHive 5.1.0 to 5.1.9 and 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case attachment functionality which enables an attacker to upload a malicious HTML file with Javascript code that will be executed in the context of the The Hive application using a specific URL. The vulnerability can be used to coerce a victim account to perform specific actions on the application as helping an analyst becoming administrator.
Related
cvelist
cvelist
CVE-2024-22876
2024-01-19 00:00:00
nvd
nvd
CVE-2024-22876
2024-01-19 14:15:13
cve
cve
CVE-2024-22876
2024-01-19 14:15:13