CVE-2024-29224

Summary

CVE-2024-29224 is a newly discovered OS command injection vulnerability. It affects GoCast version 1.1.3 and can be exploited through a specially crafted HTTP request to the NAT parameter. This vulnerability allows an attacker to inject and execute arbitrary commands, making it a significant security risk. The attack does not require authentication, increasing the potential threat to unsecured networks. GoCast users are urged to update their software to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.