CVE-2025-48479

8.5 highEPSS 0.3%

High (8.5) in freescout freescout. EPSS 0.3% chance of exploitation in the next 30 days.

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any directory, given sufficient access rights. This issue has been patched in version 1.8.180.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-841
Published: 2025-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freescout:freescout

References

https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-627h-pc3c-w68h

Check your stack JSON