CVE-2015-3337

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read…

published May 1, 2015

CVSS
—
EPSS
33%
Percentile
98.4
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.33160 · 98.4th percentile
Published
2015-05-01T15:00Z
EPSS history
Timeline
  • 01 MAY 15:00Z
    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read…
    cvelistv5