Security Advisory
CVE-2015-1427
9.8
CRITICAL
Vulnerability Description
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
Published Date
February 17, 2015
Official Source
NIST NVD Advisory