Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-29224 EUVD-2024-26238GHSA-545v-485r-7rr8

An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary c…

Published Nov 21, 2024 · Updated Nov 21, 2024 · Assigned by talos

Description

An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
GoCast GoCast 1.1.3 —

References