Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

MEDIUM 5.0CVE-2015-5531 · GHSA-jjq8-vfjq-j6v4 · Published 17/08/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
org.elasticsearch:elasticsearch Maven	`< 1.6.1`	`1.6.1`
elasticsearch elasticsearch	`≤ 1.6.0`	No fix yet

Description

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

NVD description

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

References

nvd.nist.gov/vuln/detail/CVE-2015-5531 · ADVISORY
elastic.co/community/security · WEB
exploit-db.com/exploits/38383 · WEB
packetstormsecurity.com/files/132721/Elasticsearch-Directory-Traversal.html · WEB
packetstormsecurity.com/files/133797/ElasticSearch-Path-Traversal-Arbitrary-File-Download.html · WEB
packetstormsecurity.com/files/133964/ElasticSearch-Snapshot-API-Directory-Traversal.html · WEB
securityfocus.com/archive/1/536017/100/0/threaded
securityfocus.com/bid/75935
elastic.co/community/security · Vendor Advisory
exploit-db.com/exploits/38383

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free