CVE-2025-48471

Name of the Vulnerable Software and Affected Versions FreeScout versions prior to 1.8.179

Description The issue concerns insufficient checking of files uploaded to the application, allowing files with phtml and phar extensions to be uploaded. This can lead to remote code execution if the Apache web server is used.

Recommendations For versions prior to 1.8.179, update to version 1.8.179 to resolve the issue. As a temporary workaround, consider restricting file uploads or disabling the upload feature until the update is applied.