PT-2025-23173 · Apache+1 · Apache Web Server+1

Artem Danilov + 5 · Published 2025-05-13 · Updated 2025-06-01 · CVE-2025-48471

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.179

Description The issue concerns insufficient checking of files uploaded to the application, allowing files with phtml and phar extensions to be uploaded. This can lead to remote code execution if the Apache web server is used.

Recommendations For versions prior to 1.8.179, update to version 1.8.179 to resolve the issue. As a temporary workaround, consider restricting file uploads or disabling the upload feature until the update is applied.

Exploit

Fix

RCE

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

BDU:2025-06947

CVE-2025-48471

GHSA-H2F3-932H-V38J

Affected Products

Apache Web Server

Freescout

References · 12

• 🔥 https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-h2f3-932h-v38j · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48471.json · Exploit
• https://github.com/freescout-help-desk/freescout/commit/e136660e8dbc220454b8d3f646dd1b144e49e9ed · Patch
• https://bdu.fstec.ru/vul/2025-06947 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48471 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48471 · Security Note
• https://twitter.com/cybercronai/status/1928279895689273604 · Twitter Post
• https://t.me/cvetracker/24908 · Telegram Post
• https://twitter.com/cybercronai/status/1928383545166209028 · Twitter Post
• https://twitter.com/SecAideInfo/status/1929119350461452602 · Twitter Post
• https://t.me/latest_high_impact_cve/2490 · Telegram Post
• https://twitter.com/CVEnew/status/1928113053700337702 · Twitter Post