CVE-2024-28892: MAYURESH82 Gocast

Critical severity, CVSS 9.8. EPSS: 6.5% chance of exploitation in the next 30 days.

An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

Affected products

• MAYURESH82 Gocast: version 1.1.3 only

Published 2024-11-21. Last modified 2026-06-17.