CVE-2015-1427—Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

漏洞名称

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

描述

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2015-1427

相关新闻文章

• 251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and ElasticsearchMay 28, 2025

相关 CWE

• CWE-284