Sunday, December 27, 2020
CVE-2020-35736
nist.gov
In: nist.gov
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused. CVE-2020-35736
Source Sites
Subscribe to an RSS Feed
Blog Archive
- August 2020 (560)
- September 2020 (1436)
- October 2020 (1159)
- November 2020 (1093)
- December 2020 (1314)
- January 2021 (1645)
- February 2021 (1414)
- March 2021 (1221)
- April 2021 (1028)
- May 2021 (986)
- June 2021 (528)
- July 2021 (622)
- August 2021 (748)
- September 2021 (728)
- October 2021 (1130)
- November 2021 (911)
- December 2021 (668)
- January 2022 (627)
- February 2022 (553)
- March 2022 (348)
- April 2022 (169)
- May 2022 (37)