CVE-2014-3120 PoC — Elasticsearch 安全漏洞

Source

https://github.com/echohtp/ElasticSearch-CVE-2014-3120

Associated Vulnerability

Title:Elasticsearch 安全漏洞 (CVE-2014-3120)
Description:The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.

Description

POC Code to exploite CVE-2014-3120

Readme

ElasticSearch search Remote Code Execution (CVE-2014-3120)
===========================

POC Code to exploit CVE-2014-3120

Requirements: python

Usage: python elastic_check.py <file in host:port format>

Example:
```
➜ ~$ python elastic_check.py hostport.txt
0	10.0.0.10:9200	Vulnerable
1	10.0.0.11:9201	Not Vulnerable
2	10.0.0.12:9201	Connection error

Vulnerable hosts: 1
Not-vulnerable hosts: 1
Connection Errors: 1
```

hostport.txt:
```
10.0.0.10:9200
10.0.0.11:9201
10.0.0.12:9201
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!