GHSA-q6j2-g8qf-wvf7

Verification check bypass in Gate One

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-19003

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	gateone	<= 1.2.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-19003 advisory
https://github.com/liftoff/GateOne/issues/728 web
https://github.com/advisories/GHSA-q6j2-g8qf-wvf7 advisory
https://github.com/liftoff/GateOne package
https://github.com/pypa/advisory-database/tree/main/vulns/gateone/PYSEC-2021-423.yaml web