CVE-2024-21855: MAYURESH82 Gocast

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

• MAYURESH82 Gocast: version 1.1.3 only

Published 2024-11-21. Last modified 2026-06-17.