CVE-2026-45295

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.219, the open tracking endpoint "GET /thread/read/conversationid/threadid" allows unauthenticated attackers to enumerate valid conversation and thread IDs, and modify thread state "openedat"...