{"id":49004,"date":"2025-06-05T04:21:58","date_gmt":"2025-06-05T04:21:58","guid":{"rendered":""},"modified":"2025-07-07T05:25:43","modified_gmt":"2025-07-07T11:25:43","slug":"cve-2025-48481-critical-vulnerability-in-freescout-prior-to-version-1-8-180","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-48481-critical-vulnerability-in-freescout-prior-to-version-1-8-180\/","title":{"rendered":"CVE-2025-48481: Critical Vulnerability in FreeScout Prior to Version 1.8.180<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The cybersecurity world has been hit with a recent discovery of a significant vulnerability, CVE-2025-48481, in the FreeScout self-hosted help desk and shared mailbox system. This vulnerability, which allows an attacker to activate and access blocked or deleted accounts, poses a significant risk to all users of FreeScout versions prior to 1.8.180. This vulnerability stands out due to its potential for system<\/a> compromise and data leakage, granting malicious actors unauthorized access to sensitive information.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-48481
\nSeverity: Critical (CVSS Score: 9.8)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: Required
\nImpact: Potential system compromise or data leakage<\/a><\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

FreeScout | Versions prior<\/a> to 1.8.180<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability, CVE-2025-48481, resides in the account activation process of FreeScout prior to version<\/a> 1.8.180. Specifically, an attacker with an unactivated email invitation containing an invite_hash can exploit this process. The vulnerability allows the attacker to self-activate their account<\/a>, even if it has been blocked or deleted. This is achieved by leveraging the invitation link from the email, which provides initial access to the account<\/a>.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

To exploit this vulnerability<\/a>, an attacker might use an HTTP request similar to the following:<\/p>\n

GET \/activate-account?invite_hash=malicious_hash HTTP\/1.1\nHost: vulnerable-freescout.example.com<\/code><\/pre>\n
In this request, `malicious_hash` would be the invite_hash from a blocked or deleted account’s invitation email. By sending this request, the attacker could self-activate their account and gain unauthorized access<\/a> to the FreeScout system.<\/p>\n
Recommendations for Mitigation<\/strong><\/p>\n
Users of FreeScout are urged to immediately update their software to version 1.8.180 or later, in which this issue has been patched. In case the patch cannot be immediately applied, temporary mitigation can be achieved by using a Web Application Firewall (WAF) or Intrusion Detection System (IDS) to detect and block malicious attempts to exploit this vulnerability<\/a>. However, these are merely stop-gap measures, and upgrading to a patched version of FreeScout remains the most effective solution to this critical security risk<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The cybersecurity world has been hit with a recent discovery of a significant vulnerability, CVE-2025-48481, in the FreeScout self-hosted help desk and shared mailbox system. This vulnerability, which allows an attacker to activate and access blocked or deleted accounts, poses a significant risk to all users of FreeScout versions prior to 1.8.180. This vulnerability […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-49004","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t