1. Home
  2. CVE Database
  3. CVE-2025-48479
LOW · 2.7

CVE-2025-48479

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any dir...

Vulnerability Description

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any directory, given sufficient access rights. This issue has been patched in version 1.8.180.

CVSS Score

2.7

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
FreescoutFreescout< 1.8.180

Related Weaknesses (CWE)

CWE-841

References

FAQ

What is CVE-2025-48479?

CVE-2025-48479 is a vulnerability with a CVSS score of 2.7 (LOW). FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the laravel-translation-manager package does not correctly validate user input, enabling the deletion of any dir...

How severe is CVE-2025-48479?

CVE-2025-48479 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-48479?

Check the references section above for vendor advisories and patch information. Affected products include: Freescout Freescout.