CVE-2024-28186 SMTP Mail Credentials Disclosed in Error Log in freescout

FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free Scout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises from the application storing...

CVE-2024-28186

CVE-2024-28186 affects FreeScout (PHP). The root cause is that the application stores complete stack traces in its database, which are exposed to users via the endpoint /conversation/ajax-html/send_log?folder_id=&thread_id={id}. The stack traces reveal sensitive data, including the username and p...

CVE-2024-28186 SMTP Mail Credentials Disclosed in Error Log in freescout

FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free Scout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises from the application storing...

FreeScout Log Information Disclosure Vulnerability

FreeScout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A log message disclosure vulnerability exists in FreeScout versions prior to 1.8.124, which stems from a log message disclosure vulnerability in the component...

PT-2024-22319

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.124 Description A vulnerability has been identified in the FreeScout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises...

CVE-2024-28186: Insertion of Sensitive Information into Log File

FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free Scout Application, which exposes SMTP server credentials used by an organization in the application to users of the application. This issue arises from the application storing...

CVE-2024-1932

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

Unrestricted file upload

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932 Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

CVE-2024-1932

CVE-2024-1932 affects the Freescout project (freescout-helpdesk/freescout). The entry describes an Unrestricted Upload of File with Dangerous Type vulnerability in Freescout, enabling upload of dangerous files. Multiple sources (NVD, Red Hat, OSV, CVE list) report a network-based issue with high ...

CVE-2024-1932: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type in freescout-helpdesk/freescout...

freescout Code Issue Vulnerability

freescout is an ultra-lightweight and powerful free open source helpdesk and shared inbox built using PHP Laravel framework. A code issue vulnerability exists in freescout that stems from allowing unlimited uploads of dangerous types of files...

PT-2024-18433 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: freescout-helpdesk/freescout affected versions not specified Description: The issue is related to the unrestricted upload of files with dangerous types. This could potentially allow an attacker to upload malicious files, leading to various...