Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2015-1427

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-w94p-6mhw-4qxw

Improper Access Control in Elasticsearch The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

gitlab/maven/org.elasticsearch/elasticsearch/CVE-2015-1427

Improper Access Control The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.