Local File Inclusion (LFI)

2018-12-1808:33:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

56.7%

JSON

rendertron is vulnerable to local file inclusion (LFI) attacks. The vulnerability exists due to the ability to include file:/// via alternative protocols which allows unauthenticated users to read local files.

CPENameOperatorVersion
rendertronle1.1.1

CPE	Name	Operator	Version
	rendertron	le	1.1.1

References

bugs.chromium.org/p/chromium/issues/detail?id=759111

github.com/GoogleChrome/rendertron/pull/88

0.002 Low

EPSS

Percentile

56.7%

JSON

Related for VERACODE:8043