UNKNOWN Maven
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
GHSA-x8q8-4hp5-463w · CVE-2015-3337
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.
Ready to move
Start Securing
Free, no credit card | First findings in minutes