1 matches found
CVE-2026-41905: Server-Side Request Forgery (SSRF)
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl in app/Misc/Helper.php follows HTTP redirects via curlGetLastRedirectedUrl but then re-validates the original URL instead of the final redirect destination. An...
7.7CVSS5.8AI score0.00354EPSS
SaveExploits0References2
20