ElasticSearch < 1.4.5 / < 1.5.2 - Path Transversal

Follow 3

Basic Fields

SSV ID:: SSV-89268

Find Time:: 2015-05-01

Submit Time:: 2015-08-31

Level:

Category:: 任意文件读取

Component:: ElasticSearch

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: CVE-2015-3337

CNNVD-ID：: CNNVD-201504-575

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Login to see

Detail

Contributor kalicc Got 0.5KB

Login to see

have 1 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor anonymous totally have 6KB

Login to see

etc 25 Exchange

Reference Linking

Login to see

Solutions

Login to see

Timeline

2015-05-01 发现/披露了漏洞
2015-08-31 提交了漏洞
2015-08-31 提交补充了漏洞详情
Hatred

2015-08-31 提交更新了 PoC
Hatred

2015-10-08 提交更新了 PoC
2015-12-15 提交补充了漏洞详情

Related Vuls

All Comments (3)

anonymous 2015-10-08

23333333
Reply 1 0
3F
名匿 2015-08-31

6666
Reply 1 0
2F
lightning1141 2015-08-31

...
Reply 0 0
1F

※Any content provided by this site, only to learn the code and services, not for illegal purposes