CVSS 3.1 Score 9.0 of 10 (high)


Published Mar 22, 2024


CVE-2024-29185 is a critical vulnerability affecting FreeScout, a self-hosted help desk and shared mailbox. Versions prior to 1.8.128 are susceptible to OS Command Injection in the /public/tools.php file. This vulnerability allows an attacker, who knows the App_Key of the application, to execute malicious OS commands on the server by manipulating the php_path parameter. Successful exploitation of this vulnerability could result in the complete compromise of the server hosting the FreeScout application. A patch for this issue is available in version 1.8.128, which organizations should promptly apply to remediate the vulnerability and mitigate potential risks to their systems and data.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-29185 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options