GitHub Advisoryadvisory · PyPI

GHSA-q6j2-g8qf-wvf7 Verification check bypass in Gate One

MEDIUM Published 2021-10-12 Modified 2024-09-20 Official page ↗
Aliases
CVE-2020-19003
Ecosystem
PyPI
Packages
gateone
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-290
Reviewed
2021-10-07

Affected packages

• PyPI gateone: <= 1.2.0 (no fix yet)

Description

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

Related

Alias · CVE (1)

  • CVE-2020-19003 An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances… vulnerability

Weakness · CWE (1)

  • CWE-290 Authentication Bypass by Spoofing weakness

References