Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2015-5531 — MEDIUM severity vulnerability | Release Alert

CVE-2015-5531

MEDIUMCVSS v2

Published

August 17, 2015

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

<= 1.6.0NVD

elasticsearch

NPMThe official low-level Elasticsearch client for Node.js and the browser.

<= 1.6.0NVD

ElasticSearch

NuGet Gallery

More on this CVE

NVD↗GitHub Advisory↗

Elasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

<= 1.6.0NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

<= 1.6.0NVD

elasticsearch

Python Package IndexPython client for Elasticsearch

<= 1.6.0NVD

elasticsearch

RubyGemsRuby integrations for Elasticsearch (client, API, etc.)

<= 1.6.0NVD

elasticsearch/elasticsearch

PackagistPHP Client for Elasticsearch

<= 1.6.0NVD