CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
- Update to 1.0.0
Published Updated
PatchFirst · Latest vulnerabilities
django-helpdesk vulnerabilities
Vulnerabilities published for django-helpdesk in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Update to 0.3.2
Published UpdatedCross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Update to 0.3.1
- Update to 0.3.2
Published UpdatedCross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Update to 0.3.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.