django-helpdesk Allows Sensitive Data Exposure

MEDIUM 4.4CVE-2018-25111 · GHSA-m4jx-m5hg-qrxx · PYSEC-2025-44 · Published 31/05/2025 · updated 17/06/2026

In short

CVE-2018-25111 is a MEDIUM (CVSS 4.4) vulnerability affecting django-helpdesk, django-helpdesk (django-helpdesk project).
Chance of exploitation in the next 30 days (EPSS): 0.21%, higher than 11.9% of all vulnerabilities.
Fix: update to 1.0.0 or later.

Package	Affected versions	Patched versions
django-helpdesk PyPI	`< 1.0.0`	`1.0.0`
django-helpdesk django-helpdesk_project	`< 1.0.0`	`1.0.0`

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

NVD description

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 1.0.0

1.0.0

< 1.0.0

1.0.0

More vulnerabilities in django-helpdesk

See all →