CyberSecBulletin

GoCast vulnerabilities

We track 3 vulnerabilities in GoCast products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 21, 2024.

3vulnerabilities
3critical
0high
0exploited
9.8average CVSS score

Latest GoCast vulnerabilities

  • 9.8 Critical severity

    GoCast: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-29224GoCastEPSS 6.3%

    An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

  • 9.8 Critical severity

    GoCast: Improper Neutralization of Special Elements used in an OS Command

    CVE-2024-28892GoCastEPSS 6.46%

    An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

  • 9.8 Critical severity

    GoCast: Missing Authentication for Critical Functionality

    CVE-2024-21855GoCastEPSS 2.04%

    A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.