Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
GoCast records in CISA KEVNo GoCast vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06302 · Published 2024-11-21 · No fix listed CWE-78
Priority HIGH 82
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06455 · Published 2024-11-21 · No fix listed CWE-78
Priority HIGH 82
A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0204 · Published 2024-11-21 · No fix listed CWE-306
Open these records in search →