# CVE-2020-8902: Rendertron SSRF via specially crafted webpage

Source: https://junglewise.ai/threats/cve-2020-8902-rendertron-ssrf-via-specially-crafted-webpage  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2021-03-01. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2020-8902 · Severity: info · Published 2021-03-01

Rendertron is a headless Chrome service used to render web pages into images for preview or analysis. Versions before 3.0.0 allow attackers to craft malicious webpages that force Rendertron to access internal sites and systems it can reach, potentially exposing sensitive data or internal infrastructure.

Technologies: [rendertron (npm)](https://junglewise.ai/threats/technologies/rendertron). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2020-8902 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2020-8902 being exploited in the wild.

**How severe is CVE-2020-8902?** Informational severity, published 1 March 2021.

**Which products and versions are affected?** rendertron (npm) SEMVER:introduced=0,fixed=3.0.0.

**Is there a fix for CVE-2020-8902?** Yes. rendertron (npm): upgrade to 3.0.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2020-8902 attacked?** It is attacked over the network.

**Am I affected by CVE-2020-8902?** Check whether you run rendertron (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- rendertron (npm): upgrade to 3.0.0 or later

  ```sh
  npm install rendertron@3.0.0
  ```


## Technical details

Rendertron prior to version 3.0.0 is vulnerable to Server-Side Request Forgery (CWE-918). An attacker can supply a specially crafted webpage to the service that causes the headless Chrome process to render internal or restricted URLs, returning screenshots or content that should not be accessible. The vulnerability requires network access to the Rendertron API endpoint and the ability to control input (the URL to be rendered). Exploitation allows disclosure of internal site content and reconnaissance of internal infrastructure. The fix is available in version 3.0.0 and later, which implements security measures to restrict AppEngine deployments.

## Affected products

- Google Rendertron prior to 3.0.0

## Identifiers

- CVE-2020-8902
- GHSA-xr9h-9m79-x29g

## Timeline

- 2021-02-23: disclosed
- 2021-07-02: patched: Version 3.0.0 released with fix

## References

- [https://github.com/GoogleChrome/rendertron/releases/tag/3.0.0](https://github.com/GoogleChrome/rendertron/releases/tag/3.0.0)

## Related threats

- [Google Rendertron information disclosure of absolute file paths](https://junglewise.ai/threats/cve-2017-18355-google-rendertron-information-disclosure-of-absolute-file-paths)
- [Google Rendertron reflected XSS in error reporting](https://junglewise.ai/threats/cve-2017-18352-google-rendertron-reflected-xss-in-error-reporting)
- [Google Rendertron local file inclusion vulnerability](https://junglewise.ai/threats/cve-2017-18354-google-rendertron-local-file-inclusion-vulnerability)
- [Google rendertron unauthorized Chrome shutdown via _ah/stop route](https://junglewise.ai/threats/cve-2017-18353-google-rendertron-unauthorized-chrome-shutdown-via-ah-stop-route)