CVE-2017-18354

Name of the Vulnerable Software and Affected Versions: Rendertron version 1.0.0

Description: The issue allows for the use of alternative protocols, such as file://, which introduces a Local File Inclusion bug. This enables a remote attacker to read arbitrary files.

Recommendations: For Rendertron version 1.0.0, consider disabling the use of alternative protocols, such as file://, to prevent exploitation of the Local File Inclusion bug until a patch is available. Restrict access to sensitive files and directories to minimize the risk of arbitrary file reading.