CVE-2021-3945

Summary: CVE-2021-3945 affects the Django-Helpdesk application, where a Cross-site Scripting vulnerability arises from improper neutralization of input during Web page generation. The issue stems from insufficient filtering/escaping of user input in django-helpdesk, enabling injection of maliciou...

CVE-2021-3950

The CVE-2021-3950 entry describes a stored Cross-site Scripting (XSS) vulnerability in django-helpdesk caused by improper neutralization of input during Web Page Generation. Affected component/file is django-helpdesk, and exploitation could allow arbitrary JavaScript execution in a victim’s brows...

CVE-2021-3994

CVE-2021-3994 affects django-helpdesk and is a Cross-site Scripting vulnerability caused by improper neutralization of input during web page generation. The CVSS3 details show a network-accessible, high-severity issue (base score 9.6) with low attack complexity, no privileges required, but user i...

CVE-2018-25111

CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...