Google rendertron vulnerabilities

Latest Google rendertron CVEs

Newest publication first

1. CVE-2017-18355 Rendertron discloses absolute paths of files

   Published 2018-12-17

   High·CVSS 7.5

   Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.

2. CVE-2017-18352 rendertron XSS vulnerability

   Published 2018-12-17

   Medium·CVSS 6.1

   Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.

3. CVE-2017-18354 rendertron LFI vulnerability

   Published 2018-12-17

   High·CVSS 7.5

   Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.

4. CVE-2017-18353 rendertron can remotely shut down Chrome instance

   Published 2018-12-17

   High·CVSS 7.5

   Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.