CVE-2015-1427
Elastic Elasticsearch
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
What it is
The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.