Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

freescout-help-desk freescout güvenlik açıkları

freescout-help-desk

freescout-help-desk freescout için bildirim al RSS

Toplam açık
11
Kritik
0
Aktif istismar
0
Yaması çıkan
11
Son açık
1 sa önce
Önem dağılımı
  • Kritik 0
  • Yüksek 5
  • Orta 6
  • Düşük 0

Son açıklar

11 açık

  1. 7,5Yüksek CVE-2026-85742Yama var FreeScout: Conditional stored admin XSS via failed-job details freescout-help-desk freescoutCWE-791 sa önce
  2. 7,1Yüksek CVE-2026-103985Yama var FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save freescout-help-desk freescoutCWE-2691 sa önce
  3. 6,5Orta CVE-2026-103984Yama var FreeScout: Incomplete fix for CVE-2026-40570: load_customer_info exposes cross-visibility customer PII freescout-help-desk freescoutCWE-8621 sa önce
  4. 8,2Yüksek CVE-2026-85743Yama var FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks freescout-help-desk freescoutCWE-9181 sa önce
  5. 5,4Orta CVE-2026-85744Yama var FreeScout: Conversation Merge Cross-Mailbox Authorization Bypass freescout-help-desk freescoutCWE-8631 sa önce
  6. 5,3Orta CVE-2026-62850Yama var FreeScout: Administrative tools.php endpoint is accessible to low-privileged users, enabling filesystem enumeration a… freescout-help-desk freescoutCWE-2871 sa önce
  7. 6,5Orta CVE-2026-62852Yama var FreeScout: Missing Authorization and Exposure of Sensitive Information to an Unauthorized Actor and Authorization Bypass Through User-Controlled Key freescout-help-desk freescoutCWE-2001 sa önce
  8. 4,4Orta CVE-2026-62855Yama var FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files freescout-help-desk freescoutCWE-231 sa önce
  9. 4,3Orta CVE-2026-62851Yama var FreeScout: Cross-mailbox conversation existence / internal-id disclosure via the search-by-number (`#`) shortcut (missing mailbox authorization) freescout-help-desk freescoutCWE-2001 sa önce
  10. 7,7Yüksek CVE-2026-62856Yama var FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query freescout-help-desk freescoutCWE-891 sa önce
  11. 7,6Yüksek CVE-2026-62854Yama var FreeScout: Stored XSS in mailbox signature via same-origin JS upload freescout-help-desk freescoutCWE-792 sa önce