fi3ro/CVE-2015-5377

PoC

Java deserialization exploit for elasticsearch 1.5.2 CVE-2015-5377

view exploit source poc_in_githubauthor fi3ropublished 2020-12-28catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-5377US	critical9.8	14.4% (97th)	Exploit	2018-03-06
Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-325…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.