Insufficient Data Validation in FreeScout Help Desk Software
CVE-2025-48388

7HIGH

Key Information:

Vendor

Freescout-help-desk

Status
Freescout
Vendor
CVE Published:
29 May 2025

What is CVE-2025-48388?

The FreeScout Help Desk software exhibits an insufficient validation of user-supplied data prior to version 1.8.178. This vulnerability can be exploited by attackers who can pass specially crafted strings containing control characters such as newline, carriage return, and tab into the application's string formatting functions. This flaw may lead to unexpected behavior or further exploit potential in the application. Users are advised to update to version 1.8.178 or later to mitigate this issue.

Affected Version(s)

freescout < 1.8.178

References

https://github.com/freescout-help-desk/freescout/security...
x_refsource_CONFIRM
https://github.com/freescout-help-desk/freescout/commit/e...
x_refsource_MISC

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.