CVE-2023-52268
The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoin…
Published: 2024-11-12 · CVSS: 9.1 · CVSS 3.1
The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7