Every CVESearch/Get API key

CVE-2015-3337

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

4.3 MediumPublic exploitFix available

CVE-2015-3337 is a medium vulnerability (CVSS 4.3) in Elasticsearch, published April 29, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 33.2%, the 98th percentile. Fixed in org.elasticsearch:elasticsearch 1.4.5.

Severity
4.3 MediumCVSS 2.0, NVD
Exploit chance
33.2%EPSS, 98th percentile
Exploitation
None known3 public exploits
Fixed in
1.4.5org.elasticsearch:elasticsearch +4 more

Description

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Exploit likelihood

33.2%Down 13.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.elasticsearch:elasticsearch
Maven
through 1.4.4
1.4.5
org.elasticsearch:elasticsearch
Maven
1.5.0 to 1.5.1
1.5.2
elasticsearch
Debian:8
before 1.0.3+dfsg-5+deb8u1, plus listed versions
1.0.3+dfsg-5
1.0.3+dfsg-5+deb8u1
org.elasticsearch:elasticsearch
Maven
before 1.4.5, plus listed versions
0.10.00.11.00.12.00.12.10.13.0
Show 45 moreShow less
0.13.10.14.00.14.10.14.20.14.30.14.40.15.00.15.10.15.20.16.00.16.10.16.20.16.30.16.40.16.50.17.00.17.10.17.100.17.20.17.30.17.40.17.50.17.60.17.70.17.80.17.90.18.00.18.10.18.20.18.30.18.40.18.50.18.60.18.70.19.00.19.0.RC10.19.0.RC20.19.0.RC30.19.10.19.100.19.110.19.120.19.20.19.30.19.4
1.4.5
org.elasticsearch:elasticsearch
Maven
1.5.0 up to 1.5.2, plus listed versions
1.5.1
1.5.2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBElasticSearch < 1.4.5 / < 1.5.2 - Directory Traversal2015-05-18
PoC in GitHubjas502n/CVE-2015-33372019-06-21
NucleiElasticsearch - Local File Inclusion

What each source reports

NVD Score used4.3

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Record
CVE-2015-3337
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-22
Updated
2026-11-02
CVE ListNo score

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Record
CVE-2015-3337
Updated
2026-11-02
EUVDEUVD-2022-5748No score

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Record
EUVD-2022-5748
Updated
2026-11-03
GitHub AdvisoriesGHSA-x8q8-4hp5-463wNo score

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Record
GHSA-x8q8-4hp5-463w
Weakness
CWE-22
Updated
2026-11-02
OSVGHSA-x8q8-4hp5-463wNo score

Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Record
GHSA-x8q8-4hp5-463w
Weakness
CWE-22
Updated
2026-11-02

History

History
RecordedChangedSources
exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Nuclei, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

This page doesn't list everything

Left out here: 67 versions. The JSON record has them.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open