CVE-2015-5377

Mô tả

Tham khảo

• securityfocus.com/bid/75938 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-15-365 · Third Party Advisory
• discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736 · Vendor Advisory
• elastic/elasticsearch commit bf3052d · Patch

Lỗ hổng khác của elasticsearch

• CVE-2026-103009CAO 7.1Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross…
• CVE-2026-103008TRUNG BÌNH 6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to co…
• CVE-2026-103007CAO 7.2Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is …
• CVE-2026-103006TRUNG BÌNH 6.5Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to …
• CVE-2026-103005TRUNG BÌNH 6.5Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A…