Possible Errors :


- Freshdesk portal using old JS bundle library vulnerable to CVE-2020-7656 

- Critical Vulnerability in log4j (Log4shell - CVE-2021-44228)

- Reports in JS Library Vulnerability in Freshdesk. 

- Freshdesk using older version of JS library causing vulnerability.

- Customer reports malicious links being received over Email.


Resolution Path :


  • Collect the URL, Account ID, and all the details with proof that the reported vulnerability exists in the product for the JS library used or malicious links in the emails, and forward the ticket to our Information Security team for further assistance via the email addresses :  infosec@freshworks.com & security@freshworks.com