Lucene search

K
osvGoogleOSV:GHSA-4Q69-Q4Q7-X82C
HistoryJan 04, 2019 - 5:41 p.m.

rendertron can remotely shut down Chrome instance

2019-01-0417:41:46
Google
osv.dev
10

0.004 Low

EPSS

Percentile

75.2%

Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.

CPENameOperatorVersion
rendertronlt1.1.0

0.004 Low

EPSS

Percentile

75.2%

Related for OSV:GHSA-4Q69-Q4Q7-X82C