← CVE Intelligence

CVE-2024-28892

GoCast / GoCast PUBLISHED

Description (CNA)

An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
GoCast / GoCastaffected 1.1.3

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.