CVE-2026-41183
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Description
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.215, the assigned-only restriction is applied to direct conversation view and folder queries, but not to non-folder query builders. Global search and the AJAX filter path still reveal conversations that should be hidden. Version 1.8.215 fixes the vulnerability.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-200
Source
NVD
Vendor
freescout-help-desk
Product
freescout
Discussion (0)
Add Comment
No comments yet. Be the first!