CVE-2025-48389

creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:36+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5v7qpwin2 2025-05-29 18:14:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdd4aisfk2k...

CVE-2025-48389 FreeScout Vulnerable to Deserialization of Untrusted Data

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to deserialization of untrusted data due to insufficient validation. Through the set function, a string with a serialized object can be passed, and when getting an option through the ge...