PT-2025-30950 · Freescout · Freescout
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
FreeScout versions prior to 1.8.186
Description
FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). Versions prior to 1.8.186 contain a critical deserialization vulnerability in the
/conversation/ajax endpoint. Authenticated users with knowledge of the APP KEY can achieve remote code execution. The vulnerability occurs when the application processes the attachments all and attachments POST parameters through the Helper::decrypt() function, which performs unsafe deserialization of user-controlled data without proper validation. This allows attackers to create arbitrary objects and manipulate their properties, leading to complete compromise of the web application.Recommendations
Update to version 1.8.186 or later.
Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Freescout