Description (CNA)
django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask(0) in models.py.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| django-helpdesk Project / django-helpdesk | affected 0 before 1.0.0 |
CWE
CWE-277
References
- https://github.com/django-helpdesk/django-helpdesk/pull/1120
- https://github.com/django-helpdesk/django-helpdesk/releases/tag/v1.0.0
- https://github.com/django-helpdesk/django-helpdesk/issues/591
ADP enrichment
No English description supplied.