Elasticsearch directory traversal attack risk with site plugin
Reporter | Title | Published | Views | Family All 23 |
---|---|---|---|---|
![]() | FreeBSD : elasticsearch -- directory traversal attack with site plugins (a71e7440-1ba3-11e5-b43d-002590263bf5) | 26 Jun 201500:00 | – | nessus |
![]() | Debian DSA-3241-1 : elasticsearch - security update | 30 Apr 201500:00 | – | nessus |
![]() | elasticsearch - security update | 29 Apr 201500:00 | – | osv |
![]() | Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch | 17 May 202204:12 | – | osv |
![]() | CVE-2015-3337 | 1 May 201500:00 | – | ubuntucve |
![]() | CVE-2015-3337 | 1 May 201515:59 | – | nvd |
![]() | Elasticsearch Directory Traversal Vulnerability | 5 May 201500:00 | – | openvas |
![]() | Debian: Security Advisory (DSA-3241-1) | 28 Apr 201500:00 | – | openvas |
![]() | Debian Security Advisory DSA 3241-1 (elasticsearch - security update) | 29 Apr 201500:00 | – | openvas |
![]() | Generic HTTP Directory Traversal (Web Dirs) - Active Check | 22 Jul 202100:00 | – | openvas |
Source | Link |
---|---|
exploit-db | www.exploit-db.com/exploits/37054/ |
elastic | www.elastic.co/community/security |
packetstormsecurity | www.packetstormsecurity.com/files/131646/Elasticsearch-Directory-Traversal.html |
elastic | www.elastic.co/blog/elasticsearch-1-5-2-and-1-4-5-released |
securityfocus | www.securityfocus.com/archive/1/535385 |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
FreeBSD | any | noarch | elasticsearch | 1.4.5 | UNKNOWN |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo