GitHub Advisoryadvisory · Maven

GHSA-jjq8-vfjq-j6v4 Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

MEDIUM Published 2022-05-14 Modified 2022-07-06 Official page ↗
Aliases
CVE-2015-5531
Ecosystem
Maven
Packages
org.elasticsearch:elasticsearch
Severity
Moderate
Weaknesses
CWE-22
Reviewed
2022-07-06

Affected packages

• Maven org.elasticsearch:elasticsearch: < 1.6.1 → fixed in 1.6.1

Description

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

Related

Alias · CVE (1)

  • CVE-2015-5531 Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References