61 matches found
PT-2025-23364 · Unknown · Django-Helpdesk
Name of the Vulnerable Software and Affected Versions: django-helpdesk versions prior to 1.0.0 Description: The issue concerns Sensitive Data Exposure due to the use of os.umask0 in models.py. This allows unauthorized access to sensitive information. Recommendations: For versions prior to 1.0.0,...
Django-Helpdesk 安全漏洞
Django-Helpdesk is a Django application in the Django open source. It is used to manage internal helpdesk tickets. A security vulnerability exists in Django-Helpdesk versions prior to 1.0.0, which stems from os.umask0 in models.py leading to the exposure of sensitive data...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
django-helpdesk is vulnerable to Cross-site Scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-2V5J-Q74Q-R53F django-helpdesk is vulnerable to Cross-site Scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-438
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
PYSEC-2021-438
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Cross site scripting
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994 Cross-site Scripting (XSS) - Stored in django-helpdesk/django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
CVE-2021-3994
CVE-2021-3994 affects django-helpdesk and is a Cross-site Scripting vulnerability caused by improper neutralization of input during web page generation. The CVSS3 details show a network-accessible, high-severity issue (base score 9.6) with low attack complexity, no privileges required, but user i...
django-helpdesk跨站脚本漏洞
Django-Helpdesk is a Django application. It is used to manage internal helpdesk tickets. Django-Helpdesk suffers from a cross-site scripting vulnerability that can be exploited by an attacker to perform cross-site scripting attacks...
Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
GHSA-VFRC-GGMC-5JWV Cross-site Scripting in django-helpdesk
django-helpdesk is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...