CVE-2026-53596 PUBLISHED

FreeScout has unrestricted file upload without rate limiting that leads to resource exhaustion (DoS)

Assigner: GitHub_M
Reserved: 09.06.2026 Published: 20.07.2026 Updated: 20.07.2026

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the FreeScout helpdesk application does not enforce rate limiting on the file upload endpoint. Any user can flood the server with upload requests, leading to database overload and potential denial of service for all users. Version 1.8.224 contains a fix.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 5.3

Product Status

Vendor freescout-help-desk
Product freescout
Versions
  • Version < 1.8.224 is affected

References

Problem Types

  • CWE-400: Uncontrolled Resource Consumption CWE
  • CWE-770: Allocation of Resources Without Limits or Throttling CWE