This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-48477 | BDVDB-2026-280616 Detail

freescout-help-deskfreescout

Description#

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correct sequence of actions to implement a functional capability, but the application allows access to the functional capability without correctly completing one or more actions in the sequence. The leaves the attributes of Mailbox object able to be changed by the fill method. This issue has been patched in version 1.8.180.

Impact#

Per CVSS v4.0: confidentiality impact high, integrity impact low, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-841 Improper Enforcement of Behavioral Workflow

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.