django-helpdesk Allows Sensitive Data Exposure

MÉDIO 4.4CVE-2018-25111 · GHSA-m4jx-m5hg-qrxx · PYSEC-2025-44 · Published 31/05/2025 · updated 17/06/2026

Em resumo

CVE-2018-25111 é uma vulnerabilidade MÉDIO (CVSS 4.4) que afeta django-helpdesk, django-helpdesk (django-helpdesk project).
Chance de exploração nos próximos 30 dias (EPSS): 0.21%, maior que 11.9% das vulnerabilidades.
Correção: atualize para 1.0.0 ou posterior.

Package	Affected versions	Patched versions
django-helpdesk PyPI	`< 1.0.0`	`1.0.0`
django-helpdesk django-helpdesk_project	`< 1.0.0`	`1.0.0`

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

NVD description

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 1.0.0

1.0.0

< 1.0.0

1.0.0

Mais vulnerabilidades de django-helpdesk

Ver tudo →