gocast vulnerabilities and fixes

Recent CVEs affecting gocast, with upgrade or downgrade steps. 3 tracked.

gocast has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-11-21. Highest priority: CVE-2024-29224 (score 63/100).

• CVE-2024-29224 CRITICAL 9.8 DOWNGRADE An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3
• CVE-2024-28892 CRITICAL 9.8 DOWNGRADE An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3
• CVE-2024-21855 CRITICAL 9.8 DOWNGRADE A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3

FAQ

How do I fix gocast vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gocast being exploited right now?

None of the tracked gocast CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gocast CVE should I patch first?

CVE-2024-29224 currently ranks highest (63/100): An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3.

RSS feed for gocast · ← Back to latest CVEs