Sensitive Data Exposure in Django Helpdesk Product
CVE-2018-25111
Currently unrated
What is CVE-2018-25111?
The Django Helpdesk product prior to version 1.0.0 contains a vulnerability that allows for sensitive data exposure due to improper setting of file permissions enabled by os.umask(0) in models.py. This can lead to unintentional disclosure of sensitive user data, making it essential for users to update to the latest version to secure their information.