CVE-2025-48390

creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5v66z5fa2 2025-05-29 18:10:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdcuhswxm2k...

CVE-2025-48390 FreeScout Vulnerable to Remote Code Execution (RCE)

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to code injection due to insufficient validation of user input in the phppath parameter. The backticks characters are not removed, as well as tabulation is not removed. When checking us...