forked from p34709852/monkey
13 lines
535 B
Markdown
13 lines
535 B
Markdown
|
---
|
||
|
|
title: "ElasticGroovy"
|
||
|
|
date: 2020-07-14T08:41:40+03:00
|
||
|
|
draft: false
|
||
|
|
tags: ["exploit", "windows", "linux"]
|
||
|
|
---
|
||
|
|
|
||
|
|
CVE-2015-1427.
|
||
|
|
|
||
|
|
> The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
|
||
|
|
|
||
|
|
Logic is based on [Metasploit module](https://github.com/rapid7/metasploit-framework/blob/12198a088132f047e0a86724bc5ebba92a73ac66/modules/exploits/multi/elasticsearch/search_groovy_script.rb).
|