Race Condition in FreeScout Help Desk by FreeScout
CVE-2025-48880

5.1MEDIUM

Key Information:

Vendor

Freescout-help-desk

Status
Freescout
Vendor
CVE Published:
30 May 2025

What is CVE-2025-48880?

FreeScout, a self-hosted help desk and shared mailbox application, is susceptible to a race condition when an admin deletes a user prior to version 1.8.181. This flaw could lead to unpredictable behavior during the user deletion process. The issue has been addressed in version 1.8.181, underscoring the necessity for users to update their installations to maintain security.

Affected Version(s)

freescout < 1.8.181

References

https://github.com/freescout-help-desk/freescout/security...
x_refsource_CONFIRM
https://github.com/freescout-help-desk/freescout/commit/3...
x_refsource_MISC

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-48880 : Race Condition in FreeScout Help Desk by FreeScout