Lucene search

K
osvGoogleOSV:CVE-2020-35736
HistoryDec 27, 2020 - 8:15 p.m.

CVE-2020-35736

2020-12-2720:15:12
Google
osv.dev
9
cve-2020-35736
gateone 1.1
file download
authentication
directory traversal
os.path.join misused
software

AI Score

7.2

Confidence

High

EPSS

0.025

Percentile

90.3%

GateOne 1.1 allows arbitrary file download without authentication via /downloads/… directory traversal because os.path.join is misused.

AI Score

7.2

Confidence

High

EPSS

0.025

Percentile

90.3%