Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-35736
7.5
HIGHCVSS v3
Published
December 27, 2020
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.
GitHub