Google Llc Rendertron vulnerabilities

1 known vulnerability affecting google_llc/rendertron.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-8902MEDIUMCVSS 4.3≥ stable, < 3.0.02021-02-23

CVE-2020-8902 [LOW] CWE-284 CVE-2020-8902: Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attac Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are to upgrade your rendertron to version 3.0.0, or, if you ca