This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2025-48476 | BDVDB-2026-280615 Detail

freescout-help-deskfreescout

Description#

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill() method, there is no check for the absence of the password field in the data coming from the user, which leads to a mass-assignment vulnerability. As a result, a user with the right to edit other users of the system can change their password, and then log in to the system using the set password. This issue has been patched in version 1.8.180.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-841 Improper Enforcement of Behavioral Workflow

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.