← Back to CVE search

CVE-2026-39384

FreeScout

Description

FreeScout is a free help desk and shared inbox built with PHP-s Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_visibility parameter into account when merging customers. This vulnerability is fixed in 1.8.212.

CVSS 7.6EPSS 0.23500000000000001%Risk 0.78
View source
Published
2026-04-07 17:16:37
Affected versions
<1.8.212
Type
Installed app
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L