Vulnerability vector:
Base vulnerability score (CVSSv4.0): CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Severity (CVSSv4.0): 7.1 (High)
Description:
The vulnerability was identified in FreeScout , versions v.1.8.173 and 1.8.174.
The discovered vulnerability allows an attacker to gain access to a functional capability without completing the required sequence of actions, bypassing the intended business workflow.
Vulnerability status: Confirmed by vendor
Date of vulnerability remediation: 23.05.2025
Recommendations:
Update to version 1.8.180 or higher
Additional information: Security advisory
Researcher: Ilya Tsaturov, Daniil Satyaev, Roman Cheremnykh, Artem Deikov, Artem Danilov, Stanislav Gleym (Positive Technologies)