auxiliary/scanner/http/elasticsearch_traversal

functional

ElasticSearch Snapshot API Directory Traversal

view exploit source metasploittype auxiliarycatalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-5531US	medium5.0	94.8% (100th)	Exploit	2015-08-17
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.