Vulnerability Description
The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://freescout.net/module/end-user-portal/
- https://freescout.net/modules-faq/
- https://github.com/squ1dw3rm/CVE-2023-52268
FAQ
What is CVE-2023-52268?
CVE-2023-52268 is a vulnerability with a CVSS score of 9.1 (CRITICAL). The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is...
How severe is CVE-2023-52268?
CVE-2023-52268 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-52268?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.