PT-2025-23258 · Freescout · Freescout

Artem Danilov + 5 · Publicado 2025-05-13 · Atualizado 2025-05-30 · CVE-2025-48489

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:H/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.180

Description The issue is related to Cross-Site Scripting (XSS) attacks due to insufficient data validation and sanitization during data reception. This allows attackers to execute malicious scripts on the application. The problem has been patched in version 1.8.180.

Recommendations For versions prior to 1.8.180, update to version 1.8.180 to resolve the issue. As a temporary workaround, consider implementing additional data validation and sanitization measures to minimize the risk of exploitation. Restrict access to sensitive areas of the application until the update is applied.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2025-06965

CVE-2025-48489

GHSA-JQJF-F566-485J

Produtos afetados

Freescout

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48489.json · Exploit
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-jqjf-f566-485j · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-48489 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-48489 · Nota de Segurança
• https://bdu.fstec.ru/vul/2025-06965 · Nota de Segurança
• https://twitter.com/CVEnew/status/1928343314828263674 · Publicação no Twitter
• https://t.me/cvetracker/24983 · Publicação no Telegram