PT-2025-23172 · Freescout · Freescout
Artem Danilov
+5
·
Publicado
2025-05-13
·
Atualizado
2025-07-11
·
CVE-2025-48390
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
FreeScout versions prior to 1.8.178
Description
The issue is related to insufficient validation of user input in the
php path parameter, allowing code injection. This occurs because backticks characters and tabulation are not removed from user input. An administrator can create a translation for a language, which creates a folder in the file system. This folder's path can then be specified as php path in tools.php, leading to the execution of code in backticks. The file exists function is also used to check for the presence of such a file or folder in the file system.Recommendations
For versions prior to 1.8.178, update to version 1.8.178 to resolve the issue. As a temporary workaround, consider restricting access to the
php path parameter in tools.php to prevent code injection. Additionally, avoid using the php path parameter with untrusted input until the issue is resolved.Exploit
Correção
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Freescout