A vulnerability, which was classified as problematic, has been found in django-helpdesk 0.x. Affected by this issue is the function
os.umask(0)
of the file models.py. The manipulation leads to insecure inherited permissions.
This vulnerability is handled as CVE-2018-25111. An attack has to be approached locally. There is no exploit available.
It is recommended to upgrade the affected component.