An authenticated remote code execution vulnerability in FreeScout allows attackers to compromise the underlying server through unrestricted file uploads.

This vulnerability is an unrestricted file upload flaw (CWE-434) located in the file restriction logic of the application. An authenticated user can upload a .htaccess file that, when hosted on an Apache server with AllowOverride All, permits the execution of arbitrary code.

The ability to achieve remote code execution poses a critical risk to the confidentiality, integrity, and availability of the entire help desk environment. With a CVSS score of 8.8, this flaw could allow an attacker to gain full control over the web server, potentially leading to unauthorized access to sensitive customer support data and internal system credentials.

Immediate Action: Update the FreeScout application to version 1.8.206 or later immediately to implement the necessary file restriction patches.

Proactive Monitoring: Review web server access logs for unusual file upload activity or requests targeting the configuration files and implement integrity monitoring for the web directory.

Compensating Controls: Ensure that Apache server configurations are hardened by disabling AllowOverride if not strictly required, and utilize a Web Application Firewall (WAF) to filter and block files with prohibited extensions such as .htaccess or .user.ini.

Public Exploit Available: Yes, a Metasploit module is available.

The severity of this vulnerability, combined with the presence of a public Metasploit exploit, necessitates immediate action. Administrators must prioritize updating to version 1.8.206 to close the upload vector. Failure to remediate this issue quickly exposes the host system to full compromise by any authenticated user.