1169 matches found
Sensitive Data Exposure
django-helpdesk is vulnerable to Sensitive Data Exposure. The vulnerability is due to insecure file permission settings due to os.umask0 in models.py, allows an attacker to access sensitive files or data that should be protected...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
django-helpdesk Allows Sensitive Data Exposure
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
GHSA-M4JX-M5HG-QRXX django-helpdesk Allows Sensitive Data Exposure
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PYSEC-2025-44
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PYSEC-2025-44
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
Insecure Inherited Permissions
Overview django-helpdesk is a Django-powered ticket tracker for your helpdesk Affected versions of this package are vulnerable to Insecure Inherited Permissions due to the improper setting of os.umask0 in models.py. An attacker can access sensitive data without proper authorization by exploiting...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
CVE-2018-25111
CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...
CVE-2018-25111
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...
PT-2025-23364 · Unknown · Django-Helpdesk
Name of the Vulnerable Software and Affected Versions: django-helpdesk versions prior to 1.0.0 Description: The issue concerns Sensitive Data Exposure due to the use of os.umask0 in models.py. This allows unauthorized access to sensitive information. Recommendations: For versions prior to 1.0.0,...
Django-Helpdesk 安全漏洞
Django-Helpdesk is a Django application in the Django open source. It is used to manage internal helpdesk tickets. A security vulnerability exists in Django-Helpdesk versions prior to 1.0.0, which stems from os.umask0 in models.py leading to the exposure of sensitive data...
FreeScout 安全漏洞
FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability caused by a failure to check for missing password fields in data from users. An attacker could exploit the...
CVE-2025-47658
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a...
CVE-2025-47658
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System allows Upload a Web Shell to a Web Server. This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a through 3.2.7...
CVE-2025-47658
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a...
CVE-2025-47658 WordPress ELEX HelpDesk & Customer Ticketing System plugin <= 3.2.9 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in ELEXtensions ELEX WordPress HelpDesk & Customer Ticketing System elex-helpdesk-customer-support-ticket-system allows Upload a Web Shell to a Web Server.This issue affects ELEX WordPress HelpDesk & Customer Ticketing System: from n/a...