daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2020/CVE-2020-35736.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-28 15:07:58 -04:00
parent f7100f389b
commit 5407fab438
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
cves/2020/CVE-2020-35736.yaml
View File

@ -1,10 +1,10 @@
id: CVE-2020-35736
info:
name: GateOne 1.1 - Arbitrary File Retrieval
name: GateOne 1.1 - Local File Inclusion
author: pikpikcu
severity: high
description: GateOne 1.1 allows arbitrary file retrieval without authentication via /downloads/.. directory traversal because os.path.join is incorrectly used.
description: GateOne 1.1 allows arbitrary file retrieval without authentication via /downloads/.. local file inclusion because os.path.join is incorrectly used.
reference:
- https://github.com/liftoff/GateOne/issues/747
- https://nvd.nist.gov/vuln/detail/CVE-2020-35736
@ -30,3 +30,5 @@ requests:
- type: status
status:
- 200
# Enhanced by mp on 2022/06/28