Sebikea/CVE-2015-1427-for-trixie

PoC

To test elasticsearch vulnerabillity on newer version of debian

view exploit source poc_in_githubauthor Sebikeapublished 2024-11-10catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-1427UScritical9.8OT criticalKEV
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell comm…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan