Back to Database
Status published
Critical
CVE-2024-21855
A lack of authentication vulnerability exists in the HTTP API...
Vulnerability Description
A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-21855
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Discovered by Edwin Molenaar and Matt Street of Cisco Meraki.
Affected Vendor
GoCast
View all reports →Affected Software
GoCast
Vulnerable Versions:
1.1.3
Timeline
Official Publish:
November 21st, 2024
Last Modified:
November 21st, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H