Description
Elasticsearch Groovy Scripting Engine Sandbox 安全绕过漏洞
Elasticsearch Groovy Scripting Engine Sandbox 安全绕过漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2015-1427
https://avd.aliyun.com/detail?id=AVD-2015-1427
https://blog.csdn.net/GG_BOND01/article/details/150918356
https://www.cnblogs.com/TWX521/p/17916224.html
https://github.com/vulhub/vulhub/blob/master/elasticsearch/CVE-2015-1427/README.md
https://www.rapid7.com/db/modules/exploit/multi/elasticsearch/search_groovy_script/
https://www.exploit-db.com/exploits/36415
https://jordan-wright.com/blog/2015/03/08/elasticsearch-rce-vulnerability-cve-2015-1427/
https://bugzilla.redhat.com/show_bug.cgi?id=1191969
https://www.cvedetails.com/cve/CVE-2015-1427/