A Server-Side Request Forgery vulnerability in FreeScout allows low-privileged authenticated attackers to access internal network services and cloud metadata endpoints.

This is a Server-Side Request Forgery (CWE-918) flaw residing in the Helper::sanitizeRemoteUrl() function within app/Misc/Helper.php, requiring low privileges and network access to exploit.

A successful exploit allows attackers to pivot into the internal network, potentially exposing sensitive internal APIs, cloud metadata services, and RFC1918 address spaces. This creates significant risks of data exfiltration and internal service compromise. The CVSS score of 7.7 justifies a high severity rating due to the high confidentiality impact and network attack vector.

Immediate Action: Update FreeScout to version 1.8.217 or later to resolve the SSRF vulnerability.

Proactive Monitoring: Monitor network traffic from the FreeScout application server for unauthorized or anomalous requests targeting internal IP ranges and cloud metadata endpoints.

Compensating Controls: Implement strict egress filtering and firewall rules on the application server to block outbound access to private IP address ranges and cloud metadata services.

Public Exploit Available: No

This vulnerability presents a clear pathway for internal network reconnaissance and service abuse via request forgery. Security teams must apply the primary remediation by updating to version 1.8.217 immediately to eliminate the risk of internal exposure.