CVE-2017-18353

Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users

published December 17, 2018

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.7th percentile
Published
2018-12-17T06:00Z
EPSS history
Timeline
  • 17 DEC 06:00Z
    Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users
    cvelistv5