Lucene search
PRIOn knowledge basePRION:CVE-2017-18353HistoryDec 17, 2018 - 7:29 a.m.
Design/Logic Flaw
2018-12-1707:29:00
PRIOn knowledge base
www.prio-n.com
3
0.004 Low
EPSS
Percentile
75.2%
Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rendertron | eq | 1.0.0 |
Related
cve
cve
CVE-2017-18353
2018-12-17 07:29:00
osv
osv
rendertron can remotely shut down Chrome instance
2019-01-04 17:41:46
CVE-2017-18353
2018-12-17 07:29:00
nvd
nvd
CVE-2017-18353
2018-12-17 07:29:00
github
github
rendertron can remotely shut down Chrome instance
2019-01-04 17:41:46
cvelist
cvelist
CVE-2017-18353
2018-12-17 06:00:00