Security Advisory

CVE-2015-1427

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-02-17 15:00:00

Last updated 2025-10-22 00:05:33

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

← Browse all CVEs View on cve.org ↗