Skip to content
OpenAdvisories
Medium · 5.1 CVE-2018-25111 EUVD-2025-16536GHSA-m4jx-m5hg-qrxxPYSEC-2025-44

django-helpdesk Allows Sensitive Data Exposure

Published May 31, 2025 · Updated Jun 2, 2025 · Assigned by mitre

Vendor: django-helpdesk Project Product: django-helpdesk Package: django-helpdesk Ecosystem: PyPI

Description

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.

Affected products

VendorProductAffectedFixed
django-helpdesk Project django-helpdesk < 1.0.0 1.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI django-helpdesk < 1.0.0 1.0.0 GHSA-m4jx-m5hg-qrxx

References