The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.
PoC: exploit-CVE-2015-1427
Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container
PoC: vulhub-elasticsearch-cve-2015-1427
Vulhub elasticsearch/CVE-2015-1427: Elasticsearch 1.4.2 Groovy sandbox escape, run with Isoloom
PoC: CVE-2015-1427-for-trixie
To test elasticsearch vulnerabillity on newer version of debian
PoC: cve-2015-1427
cve-2015-1427
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free