PT-2025-23245 · Unknown+1 · Laravel Translation Manager+1

Artem Danilov + 5 · Published 2025-05-13 · Updated 2025-06-04 · CVE-2025-48479

Positive Technologies (AI Summary)

CVSS v2.0

8.7

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.180

Description The issue concerns the laravel-translation-manager package in FreeScout, which does not correctly validate user input. This enables the deletion of any directory, given sufficient access rights.

Recommendations For versions prior to 1.8.180, update to version 1.8.180 to patch the vulnerability in the laravel-translation-manager package. As a temporary workaround, consider restricting access rights to minimize the risk of unauthorized directory deletion.

Exploit

Fix

Weakness Enumeration

CWE-841

Related Identifiers

BDU:2025-06955

CVE-2025-48479

GHSA-627H-PC3C-W68H

Affected Products

Freescout

Laravel Translation Manager

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/48xxx/CVE-2025-48479.json · Exploit
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-627h-pc3c-w68h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48479 · Security Note
• https://bdu.fstec.ru/vul/2025-06955 · Security Note
• https://osv.dev/vulnerability/CVE-2025-48479 · Vendor Advisory
• https://t.me/cvetracker/24967 · Telegram Post
• https://t.me/latest_high_impact_cve/2497 · Telegram Post
• https://twitter.com/CveFindCom/status/1928310304959508806 · Twitter Post
• https://t.me/cvenotify/124099 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1928339100295196921 · Twitter Post
• https://twitter.com/dailycve/status/1930317249329418665 · Twitter Post