CVE-2015-1427

· CRITICALAnalyzed

← All CVEs

CVSS v3.1

9.8

EPSS

99.91%

Published

Feb 17, 2015

Modified

Apr 22, 2026

CISA Known Exploited Vulnerability

Added: 2022-03-25 · Due: 2022-04-15

Apply updates per vendor instructions.

Public PoC / Exploit (9)

All weaponized →

Exploit-DBElasticSearch - Search Groovy Sandbox Bypass (Metasploit)Exploit-DBElasticSearch - Remote Code Execution NucleiNuclei detection template TrickestTrickest PoC index GitHub PoCt0kx/exploit-CVE-2015-1427★32 GitHub PoCcved-sources/cve-2015-1427★0 GitHub PoCcyberharsh/Groovy-scripting-engine-CVE-2015-1427★0 GitHub PoCxpgdgit/CVE-2015-1427★0 GitHub PoCSebikea/CVE-2015-1427-for-trixie★0

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (3)

elastic · elasticsearch (up to 1.3.8)vulnerable

elastic · elasticsearch (up to 1.4.3)vulnerable

redhat · fusevulnerable

References (17)

http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/

PatchVendor Advisory

http://www.securityfocus.com/archive/1/534689/100/0/threaded

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/72585

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:0868

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/100850

Third Party AdvisoryVDB Entry

https://www.elastic.co/community/security/

Not ApplicableVendor Advisory

http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/

PatchVendor Advisory

http://www.securityfocus.com/archive/1/534689/100/0/threaded

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/72585

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:0868

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/100850

Third Party AdvisoryVDB Entry

https://www.elastic.co/community/security/

Not ApplicableVendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427

US Government Resource

KEV Catalog EPSS Scores Vendors All CVEs