CVE-2024-28892 | GoCast 1.1.3 HTTP Request name os command injection (TALOS-2024-1960)

A vulnerability classified as very critical has been found in GoCast 1.1.3. This affects an unknown part of the component HTTP Request Handler. The manipulation of the argument name leads to os command injection.

This vulnerability is uniquely identified as CVE-2024-28892. It is possible to initiate the attack remotely. There is no exploit available.