CVE-2015-1427CISA KEV: Actively Exploited

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

Published Mar 25, 2022·Updated Mar 25, 2022

Description

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

PoC: exploit-CVE-2015-1427

Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container

PoC: CVE-2015-1427-for-trixie

To test elasticsearch vulnerabillity on newer version of debian

PoC: cve-2015-1427

cve-2015-1427

Get alerted for CVEs like this