{"id":"CVE-2026-62850","published":"2026-11-06T17:18:33.157","lastModified":"2026-11-11T05:19:50.067","description":"FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.225, the administrative tools.php maintenance endpoint is reachable without an appropriate authentication or access-control boundary. Response differences for attacker-controlled path values disclose whether arbitrary directories and files exist on the server. The same endpoint validates application-key and database-password candidates without rate limiting, per-session throttling, or a CAPTCHA, allowing unrestricted guessing attempts against application secrets. This issue is fixed in version 1.8.225.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-287","CWE-307","CWE-538"],"vendors":[],"products":[],"references":[{"url":"https://github.com/freescout-help-desk/freescout/commit/8bb0594e95eab6661b4372e94ac02f62a6c3cb28","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/releases/tag/1.8.225","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j","tags":[]}],"exploitRefs":[{"url":"https://github.com/freescout-help-desk/freescout/commit/8bb0594e95eab6661b4372e94ac02f62a6c3cb28","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/releases/tag/1.8.225","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j","tags":[]},{"url":"https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-w2p9-3666-vw9j","tags":[]}],"hasPoc":true,"ai":null}