漏洞描述
ElasticSearch存在基于Log4j2组件的漏洞,攻击者可利用该组件探测系统敏感信息。
ElasticSearch 基于Log4j2组件的远程命令执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-45046-DAST: Apache Log4j2 - Remote Code Injection
- POC CVE-2014-3120: ElasticSearch v1.1.1/1.2 RCE
- POC CVE-2015-1427: ElasticSearch - Remote Code Execution
- POC CVE-2015-3337: Elasticsearch - Local File Inclusion
- POC CVE-2015-5531: ElasticSearch <1.6.1 - Local File Inclusion
- POC CVE-2021-22145: Elasticsearch 7.10.0-7.13.3 - Information Disclosure
- POC CVE-2021-44228: Apache Log4j2 Remote Code Injection
- POC CVE-2021-45046: Apache Log4j2 - Remote Code Injection
- POC CVE-2014-3120: ElasticSearch v1.1.1/1.2 RCE
- POC CVE-2015-1427: ElasticSearch - Remote Code Execution
- POC CVE-2015-3337: Elasticsearch File Read
- POC CVE-2015-5531: Elasticsearch CVE-2015-5531
- POC CVE-2021-22145: ElasticSearch 7.13.3 - Memory disclosure