~ / search / GHSA-jjq8-vfjq-j6v4

GHSA-jjq8-vfjq-j6v4

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

Source: GitHub Advisory Database (reviewed) Moderate CVE-2015-5531

Packages

EcosystemPackageAffectedFixed in
Maven org.elasticsearch:elasticsearch < 1.6.1 1.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

References

External links from the advisory. They lead to third-party sites.