Skip to content
OpenAdvisories
Unscored DSA-3241-1 1 CVE

elasticsearch - security update

Published Apr 29, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 elasticsearch 1.0.3+dfsg-5+deb8u1

Vulnerabilities 1

  • Medium —
    CVE-2015-3337 Public exploit Scanner template EPSS 33%

    Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

    org.elasticsearch:elasticsearch Maven