CVE-2025-48477
FreeScout Has Business Logic Errors
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
FreeScout Has Business Logic Errors
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correct sequence of actions to implement a functional capability, but the application allows access to the functional capability without correctly completing one or more actions in the sequence. The leaves the attributes of Mailbox object able to be changed by the fill method. This issue has been patched in version 1.8.180.
Reserved 2025-05-22 | Published 2025-05-30 | Updated 2025-05-30 | Assigner GitHub_MCWE-841: Improper Enforcement of Behavioral Workflow
github.com/...escout/security/advisories/GHSA-2c82-qx7x-35h8
Support options
