Freescout-help-desk vulnerabilities
We track 43 vulnerabilities in Freescout-help-desk products. 43 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.
Latest Freescout-help-desk vulnerabilities
- 9.8 Critical severity
freescout: Unrestricted Upload of File with Dangerous Type
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient checking of files uploaded to the application. This allows files to be uploaded with the phtml and phar extensions,
- 7.2 High severity
freescout: Improper Control of Generation of Code
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to code injection due to insufficient validation of user input in the php_path parameter. The backticks characters are not removed, as well as tabul
- 7.2 High severity
freescout: Deserialization of Untrusted Data
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to deserialization of untrusted data due to insufficient validation. Through the set function, a string with a serialized object can be passed, and