Sensitive Data Exposure in Django Helpdesk Product

CVE-2018-25111

What is CVE-2018-25111?

The Django Helpdesk product prior to version 1.0.0 contains a vulnerability that allows for sensitive data exposure due to improper setting of file permissions enabled by os.umask(0) in models.py. This can lead to unintentional disclosure of sensitive user data, making it essential for users to update to the latest version to secure their information.

References