FreeScout Vulnerability Allows Unauthorized Chat Setting Changes

The National Vulnerability Database has identified a critical flaw in FreeScout, a popular self-hosted help desk solution. Versions prior to 1.8.215 suffer from a vulnerability where the MailboxesController::updateSave() function incorrectly persists the chat_start_new setting. This bypasses field filters, allowing a user with only the ‘sig’ permission to alter this hidden, mailbox-wide chat setting through direct POST requests, despite only seeing the signature field in the UI. This bypass is significant as it allows for unauthorized configuration changes that could impact operational workflows.

The National Vulnerability Database rates this vulnerability at CVSS 7.1 (HIGH). The attack vector is Network-based (AV:N) with Low Complexity (AC:L), requiring only Low Privileges (PR:L) and no User Interaction (UI:N). While the impact on Confidentiality (C:L) and Availability (A:N) is low, the impact on Integrity (I:H) is high, meaning attackers can significantly alter system data or configurations. This presents a clear risk for organizations relying on FreeScout for customer support and internal communication management.