CVE-2026-85743

{
  "etk_id": "ETK-2026-3742",
  "cve_id": "CVE-2026-85743",
  "display_id": "CVE-2026-85743",
  "ghsa_id": "GHSA-6w8v-qp43-vg2h",
  "euvd_id": "EUVD-2026-118377",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Server-side request forgery in FreeScout",
  "summary": "FreeScout versions before 1.8.230 can be induced to send server-side requests to loopback or internal network services through affected URL-handling functions. An authenticated administrator, or a user permitted to change mailbox settings or run module installation or update actions, can trigger these requests and potentially probe or retrieve data from reachable internal services. The evidence does not establish unauthenticated exploitation.",
  "mitigation": "Upgrade FreeScout to version 1.8.230 or later. Until upgraded, restrict mailbox-configuration and module-management permissions to trusted administrators and limit the server's outbound access to internal networks.",
  "vendor": "freescout-help-desk",
  "product": "FreeScout",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<1.8.230"
      ],
      "ecosystem": "composer",
      "fixed_versions": [
        "1.8.230"
      ],
      "package_name": "freescout-help-desk/freescout",
      "purl": "pkg:composer/freescout-help-desk/freescout"
    }
  ],
  "cwes": [
    918
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 27.099177416666667,
  "t0_at": "2026-11-06T17:06:26.940000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-06T17:49:00.429789+00:00",
      "days": 0.029554279965277777,
      "is_lower_bound": false,
      "measured_at": "2026-11-06T17:06:26.940000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-06T17:06:26.940000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-06T17:06:26.940000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-85743"
    }
  }
}