CVE-2020-35736

Published December 27th, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.

liftoff/GateOne

Gate One is an HTML5-powered terminal emulator and SSH client

GitHub

6.3K