Medium severity5.1NVD Advisory· Published May 31, 2025· Updated Jun 17, 2026
CVE-2018-25111
CVE-2018-25111
Description
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
django-helpdeskPyPI | < 1.0.0 | 1.0.0 |
Affected products
3- cpe:2.3:a:django-helpdesk_project:django-helpdesk:*:*:*:*:*:*:*:*Range: <1.0.0
- django-helpdesk Project/django-helpdeskv5Range: 0
Patches
Vulnerability mechanics
References
7- github.com/django-helpdesk/django-helpdesk/pull/1120nvdExploitPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-m4jx-m5hg-qrxxghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-25111ghsaADVISORY
- github.com/django-helpdesk/django-helpdesk/commit/f872ec252769bee5a88b06d07d3634e580c67bccghsaWEB
- github.com/django-helpdesk/django-helpdesk/issues/591nvdIssue TrackingWEB
- github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0nvdRelease NotesWEB
- github.com/pypa/advisory-database/tree/main/vulns/django-helpdesk/PYSEC-2025-44.yamlghsaWEB
News mentions
0No linked articles in our index yet.