CVE-2015-1427
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-1427
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Elasticsearch Groovy Scripting Engine Sandbox 安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Elasticsearch是荷兰Elasticsearch公司的一套基于Lucene构建的开源分布式RESTful搜索引擎，它主要用于云计算中，并支持通过HTTP使用JSON进行数据索引。 Elasticsearch 1.37及之前版本和1.4.3之前1.4.x版本的Groovy脚本引擎中存在安全漏洞。远程攻击者可借助特制的脚本利用该漏洞绕过沙箱保护机制，执行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-1427
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container | https://github.com/t0kx/exploit-CVE-2015-1427 | POC Details |
| 2 | cve-2015-1427 | https://github.com/cved-sources/cve-2015-1427 | POC Details |
| 3 | None | https://github.com/cyberharsh/Groovy-scripting-engine-CVE-2015-1427 | POC Details |
| 4 | None | https://github.com/xpgdgit/CVE-2015-1427 | POC Details |
| 5 | To test elasticsearch vulnerabillity on newer version of debian | https://github.com/Sebikea/CVE-2015-1427-for-trixie | POC Details |
| 6 | ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1427.yaml | POC Details |
| 7 | None | https://github.com/Threekiii/Awesome-POC/blob/master/%E6%95%B0%E6%8D%AE%E5%BA%93%E6%BC%8F%E6%B4%9E/ElasticSearch%20Groovy%20%E6%B2%99%E7%9B%92%E7%BB%95%E8%BF%87%20&%20%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2015-1427.md | POC Details |
| 8 | None | https://github.com/chaitin/xray-plugins/blob/main/poc/manual/elasticsearch-cve-2015-1427.yml | POC Details |
| 9 | https://github.com/vulhub/vulhub/blob/master/elasticsearch/CVE-2015-1427/README.md | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-1427
Please Login to view more intelligence information
- http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/x_refsource_CONFIRM
- https://www.elastic.co/community/security/x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-1427
Same Patch Batch · n/a · 2015-02-17 · 13 CVEs total
| CVE-2014-8757 | LG On-Screen Phone 安全绕过漏洞 | |
| CVE-2014-9466 | Open-Xchange AppSuite and Server 权限许可和访问控制漏洞 | |
| CVE-2015-0247 | e2fsprogs libext2fs库基于堆的缓冲区溢出漏洞 | |
| CVE-2015-1494 | WordPress FancyBox for WordPress插件跨站脚本漏洞 | |
| CVE-2015-1616 | McAfee Data Loss Prevention Endpoint ePO扩展SQL注入漏洞 | |
| CVE-2015-1617 | McAfee Data Loss Prevention Endpoint ePO扩展跨站脚本漏洞 | |
| CVE-2015-1618 | McAfee Data Loss Prevention Endpoint ePO扩展信息泄露漏洞 | |
| CVE-2015-1619 | McAfee Email Gateway Secure Web Mail Client用户界面跨站脚本漏洞 | |
| CVE-2015-1621 | Drupal Webform prepopulate block模块跨站脚本漏洞 | |
| CVE-2014-6102 | 多款IBM产品权限许可和访问控制漏洞 | |
| CVE-2014-6194 | 多款IBM产品路径遍历漏洞 | |
| CVE-2014-8023 | Cisco Adaptive Security Appliances 权限许可和访问控制漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_ - CVE-2026-8261
Squirrel sqobject.cpp Load heap-based overflow - CVE-2026-8258
Squirrel sqstdstring.cpp validate_format stack-based overflo
V. Comments for CVE-2015-1427
No comments yet