Skip to content
OpenAdvisories

Product · freescout-help-desk

freescout

90 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

42 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-48472

    FreeScout Vulnerable to Insufficient Authorization

    FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifications for the mailbox to which they already have access. Moreover, the code explicitly implements functional…

    freescout-help-desk freescout
  • Medium 4.6
    CVE-2024-34698

    Prototype Pollution in getQueryParam Function (URL Query Parser)

    FreeScout is a free, self-hosted help desk and shared mailbox. Versions of FreeScout prior to 1.8.139 contain a Prototype Pollution vulnerability in the `/public/js/main.js` source file. The Prototype Pollution arises because the `getQueryParam` Function recu…

    freescout-help-desk freescout