The vulnerability in the FreeScout support service’s script/help/{mailbox_id}/auth/{customer_id}/{hash}/{timestamp} allows a hacker to execute arbitrary code.

The vulnerability of the “/help/mailboxid/auth/customerid/hash/timestamp” scenario in the FreeScout support service management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...