Vulnerabilities (CVE)

Filtered by vendor Liftoffsoftware Subscribe
Filtered by product Gateone
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-35736 1 Liftoffsoftware 1 Gateone 2020-12-29 5.0 MEDIUM 7.5 HIGH
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.