CVE-2026-41905

7.7 Élevée

Publiée le 07/05/2026 à 21:16 · Modifiée le 17/06/2026 à 12:47 · Analyse NVD reportée · Source : security-advisories@github.com

Description

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, Helper::sanitizeRemoteUrl() in app/Misc/Helper.php follows HTTP redirects via curlGetLastRedirectedUrl() but then re-validates the original URL instead of the final redirect destination. An attacker who can supply any URL that passes the initial host check can redirect FreeScout to internal HTTP services (cloud metadata, internal APIs, RFC1918 ranges) that would normally be blocked. This issue has been patched in version 1.8.217.

Traduire en français

Produits concernés

freescout-help-desk freescout

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.7 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/freescout-help-desk/freescout/releases/tag/1.8.217
https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-22wf-848c-c856
https://github.com/freescout-help-desk/freescout/security/advisories/GHSA-22wf-848c-c856

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories