Firetruck

CVE-2015-1427

KEV
Updated Oct 22, 2025 · PUBLISHED
View KEV entry →

Description

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
n/an/a / n/an/aaffected