FreeScout profile save lifts assigned-only ticket restriction
In a customer help desk tool, restricted staff can peek at other people's chats.
Summary
FreeScout lets a restricted agent remove the administrator's 'see only assigned conversations' limit by saving their own profile. The agent can then read and change other agents' conversations in shared mailboxes. Versions before 1.8.231 are affected.
Affected when
- Agent restricted to 'see only assigned conversations'
What to do
Update to 1.8.231.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen