UNKNOWN Maven
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
GHSA-jjq8-vfjq-j6v4 · CVE-2015-5531
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2015-5531
- WEB https://www.elastic.co/community/security
- WEB https://www.exploit-db.com/exploits/38383
- WEB http://packetstormsecurity.com/files/132721/Elasticsearch-Directory-Traversal.html
- WEB http://packetstormsecurity.com/files/133797/ElasticSearch-Path-Traversal-Arbitrary-File-Download.html
- WEB http://packetstormsecurity.com/files/133964/ElasticSearch-Snapshot-API-Directory-Traversal.html
Ready to move
Start Securing
Free, no credit card | First findings in minutes