Elasticsearch 1.5.2 is vulnerable to RCE through insecure java deserialization.
The exploit attack the transport protocol on port 9300. The deserialization is based on Groovy MethodClosure chain to achive RCE.
-
Notifications
You must be signed in to change notification settings - Fork 0
fi3ro/CVE-2015-5377
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Java deserialization exploit for elasticsearch 1.5.2 CVE-2015-5377
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published