Login Request a demo
RE
Product
Rendertron
by Google · last CVE Feb 23, 2021
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rendertron to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-18355
7.5
1%
Dec 17
Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of…
Affected: 1.0.0
CVE-2017-18354
7.5
1%
Dec 17
Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker
Affected: 1.0.0
CVE-2017-18353
7.5
1%
Dec 17
Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users
Affected: 1.0.0
CVE-2017-18352
6.1
1%
Dec 17
Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs
Affected: 1.0.0
CVE-2020-8902
4.3
0%
Feb 23
Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack
Affected: before 3.0.0
Showing 5