GHSA-q6j2-g8qf-wvf7
Suggest an improvement- Source
- https://github.com/advisories/GHSA-q6j2-g8qf-wvf7
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/10/GHSA-q6j2-g8qf-wvf7/GHSA-q6j2-g8qf-wvf7.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-q6j2-g8qf-wvf7
- Aliases
-
- CVE-2020-19003
- PYSEC-2021-423
- Published
- 2021-10-12T22:34:28Z
- Modified
- 2024-09-20T21:25:24.014701Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Verification check bypass in Gate One
- Details
-
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.
- References
Affected packages
PyPI / gateone
Package
- Name
- gateone
- View open source insights on deps.dev
- Purl
- pkg:pypi/gateone