CVE-2015-1427 1

CVE-2015-1427: Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Mar 25, 2022

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

Vulnerabilities & Patching