Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-52268. PoCs published by squ1dw3rm.
AI-analyzed exploit summary This exploit targets an authentication bypass vulnerability in FreeScout End-User Portal Module versions below 1.0.65. It generates session tokens and tests them against the magic link endpoint to impersonate arbitrary users, potentially gaining access to sensitive support tickets.
Description
The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module is not part of freescout-helpdesk/freescout on GitHub.
Exploits (1)
This exploit targets an authentication bypass vulnerability in FreeScout End-User Portal Module versions below 1.0.65. It generates session tokens and tests them against the magic link endpoint to impersonate arbitrary users, potentially gaining access to sensitive support tickets.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N