An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1961 | Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1961 | Third Party Advisory |
Configurations
History
17 Dec 2024, 22:20
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-21 15:15
Updated : 2024-12-17 22:20
NVD link : CVE-2024-29224
Mitre link : CVE-2024-29224
JSON object : View
Products Affected
mayuresh82
- gocast
CWE
No CWE.
