PT-2025-23148 · Freescout · Freescout

Artem Danilov

+5

·

Published

2025-05-13

·

Updated

2025-07-11

·

CVE-2025-48388

CVSS v2.0
8.0
VectorAV:N/AC:L/Au:S/C:C/I:P/A:P
Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.178
Description The issue is related to insufficient validation of user-supplied data, which is used as arguments to string formatting functions. This allows an attacker to pass a string containing special symbols (
r
,
, 
t
) to the application. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited.
Recommendations For versions prior to 1.8.178, update to version 1.8.178 to resolve the issue. As a temporary workaround, consider restricting the input of special symbols (
r
,
, 
t
) to minimize the risk of exploitation.

Fix

RCE

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-135CWE-93CWE-134

Related Identifiers

BDU:2025-06944
CVE-2025-48388
GHSA-C76F-WGGM-GRCQ

Affected Products

Freescout