CVE-2024-29185

FreeScout is a self-hosted help desk and shared mailbox. Versions prior to 1.8.128 are vulnerable to OS Command Injection in the /public/tools.php source file. The value of the php_path parameter is being executed as an OS command by the shell_exec function, without validating it. This allows an adversary to execute malicious OS commands on the server. A practical demonstration of the successful command injection attack extracted the /etc/passwd file of the server. This represented the complete compromise of the server hosting the FreeScout application. This attack requires an attacker to know the `App_Key` of the application. This limitation makes the Attack Complexity to be High. If an attacker gets hold of the `App_Key`, the attacker can compromise the Complete server on which the application is deployed. Version 1.8.128 contains a patch for this issue.

• CWE-78
• CWE-78

• https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-7p9x-ch4c-vqj9Exploit, Vendor Advisory
• https://github.com/freescout-helpdesk/freescout/security/advisories/GHSA-7p9x-ch4c-vqj9Exploit, Vendor Advisory

Published

Mar 22, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2918Improper input validation in PAM JIT elevation feature in De…3.6
• CVE-2024-29180Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-m…7.5
• CVE-2024-29181Strapi is an open-source content management system. Prior to…3.5
• CVE-2024-29182Collabora Online is a collaborative online office suite base…6.1
• CVE-2024-29183OpenRASP is a RASP solution that directly integrates its pro…6.1
• CVE-2024-29184FreeScout is a self-hosted help desk and shared mailbox. A S…8
• CVE-2024-29186Bref is an open-source project that helps users go serverles…5.3
• CVE-2024-29187WiX toolset lets developers create installers for Windows In…7.3
• CVE-2024-29188WiX toolset lets developers create installers for Windows In…7.9
• CVE-2024-29189PyAnsys Geometry is a Python client library for the Ansys Ge…7.8
• CVE-2024-2919The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…5.4
• CVE-2024-29190Mobile Security Framework (MobSF) is a pen-testing, malware …7.5