CVE-2014-3120
Elastic Elasticsearch
Elasticsearch Remote Code Execution Vulnerability
What it is
Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.