CVE-2025-48390

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, FreeScout is vulnerable to code injection due to insufficient validation of user input in the php_path parameter. The backticks characters are not removed, as well as tabulation is not removed. When checking user input, the file_exists function is also called to check for the presence of such a file (folder) in the file system. A user with the administrator role can create a translation for the language, which will create a folder in the file system. Further in tools.php, the user can specify the path to this folder as php_path, which will lead to the execution of code in backticks. This issue has been patched in version 1.8.178.

• CWE-94

• https://github.com/freescout-help-desk/freescout/commit/fb33d672a2d67f5a2b3cf69c80945267f17908b2Patch
• https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-5324-cw55-gwj5Exploit, Vendor Advisory

Published

May 29, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-48385Git is a fast, scalable, distributed revision control system…8.6
• CVE-2025-48386Git is a fast, scalable, distributed revision control system…6.3
• CVE-2025-48387tar-fs provides filesystem bindings for tar-stream. Versions…8.7
• CVE-2025-48388FreeScout is a free self-hosted help desk and shared mailbox…6.5
• CVE-2025-48389FreeScout is a free self-hosted help desk and shared mailbox…7.2
• CVE-2025-4839A vulnerability has been found in itwanger paicoding 1.0.0/1…8.1
• CVE-2025-48391In JetBrains YouTrack before 2025.1.76253 deletion of issues…7.5
• CVE-2025-48392A vulnerability in Apache IoTDB. This issue affects Apache …7.5
• CVE-2025-48393The server identity check mechanism for firmware upgrade per…5.7
• CVE-2025-48394An attacker with authenticated and privileged access could m…4.7
• CVE-2025-48395An attacker with authenticated and privileged access could m…4.7
• CVE-2025-48396Arbitrary code execution is possible due to improper validat…8.3