GHSA-5qww-56gc-f66c

ghsaUSosv

GoCast OS Command Injection vulnerability

view advisory published 2024-12-20Licence: CC-BY-4.0

An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-28892US	—	6.46% (94th)	—	2024-11-21
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make a…

references

External citations — patches, advisories, analysis.

https://github.com/mayuresh82/gocastPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2024-28892ADVISORY
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1960WEB
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1960WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan