by Kastro
Paper/Archive/CVE-2025-48471

CVE-2025-48471

freescout-help-desk freescout — FreeScout Vulnerable to Arbitrary File Upload

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.2.682 × 2013.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient checking of files uploaded to the application. This allows files to be uploaded with the phtml and phar extensions, which can lead to remote code execution if the Apache web server is used. This issue has been patched in version 1.8.179.

Affected

ProductAffectedFixed inSource
freescout< 1.8.179–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GitHub_M (CNA)7.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

exploitgithub.com/freescout-help-desk/freescout/security/advisories/GHSA-h2f3-932h-v38jrefgithub.com/freescout-help-desk/freescout/commit/e136660e8dbc220454b8d3f646dd1b144e49e9ed