A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
Fri, 20 Dec 2024 17:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Mayuresh82
Mayuresh82 gocast |
|
CPEs | cpe:2.3:a:mayuresh82:gocast:1.1.3:*:*:*:*:*:*:* | |
Vendors & Products |
Mayuresh82
Mayuresh82 gocast |
Fri, 22 Nov 2024 12:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
References |
|
Thu, 21 Nov 2024 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gocast
Gocast gocast |
|
CPEs | cpe:2.3:a:gocast:gocast:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gocast
Gocast gocast |
|
Metrics |
ssvc
|
Thu, 21 Nov 2024 14:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | |
Weaknesses | CWE-306 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2024-11-21T14:41:52.221Z
Updated: 2024-11-21T16:03:29.984Z
Reserved: 2024-03-22T18:57:18.398Z
Link: CVE-2024-21855
Vulnrichment
Updated: 2024-11-21T16:03:29.984Z
NVD
Status : Analyzed
Published: 2024-11-21T15:15:26.940
Modified: 2024-12-20T17:05:24.753
Link: CVE-2024-21855
Redhat
No data.