A vulnerability was found in freescout-helpdesk freescout up to 1.8.138. It has been declared as problematic. This vulnerability affects the function getQueryParam of the file /public/js/main.js. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability was named CVE-2024-34698. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.