CVE-2020-35736

CVE-2020-35736

Published · Updated

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 15%
exploitation probability
15%top 3% of all CVEs
observed exploitation
nono source reports it
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.
Affected products
n/a · n/a