FreeScout mailbox signature script injection, file read, and maintenance page leaks
In the FreeScout help desk program, staff screen data can be peeked at or stolen.
Summary
FreeScout versions before 1.8.225 have three flaws: scripts hidden in mailbox signatures, a log viewer that reads files outside its folder, and a maintenance page that leaks file information and allows unlimited guessing of secrets. Self-hosted FreeScout users are affected.
Affected when
- Logged-in user account that can edit mailbox signatures
- Administrator login session and the APP_KEY value
What to do
Update FreeScout to version 1.8.225 or later.
Products and platforms
CVE IDs
Sources
Times
First published
First seen