GHSA-5qww-56gc-f66c
GoCast OS Command Injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/mayuresh82/gocast | <= 1.1.3 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
References
External links from the advisory. They lead to third-party sites.