← All advisories

High severity7.5NVD Advisory· Published Dec 27, 2020· Updated Jun 17, 2026

CVE-2020-35736

CVE-2020-35736

Description

GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

GateOne/GateOnedescription
GateOne/GateOnellm-create
Range: <1.1
liftoff/GateOnellm-fuzzy
Range: <1.1

Patches

Vulnerability mechanics

References

2

github.com/liftoff/GateOne/issues/747nvdExploitThird Party Advisory
rmb122.com/2019/08/28/Ogeek-Easy-Realworld-Challenge-1-2-Writeup/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.