ElasticSearch v1.1.1/1.2 RCE

Elasticsearch is a search server based on Lucene. The old versions of ElasticSearch support passing in dynamic scripts (MVEL) to perform some complex operations, and MVEL can execute Java code, and there is no sandbox, so a user can directly execute arbitrary code.

Mitigation / Precaution

• In order to patch this vulnerability, we suggest you to update ElasticSearch to the latest version.
• We recommend you to configure ‘script.disable_dynamic: true’ in elasticsearch.yml.

Written by

Anandhu K A

Lead Engineer

With a profound understanding of product development, Anandhu plays a pivotal role in crafting cutting-edge solutions that cater to the evolving security needs of digital applications. His expertise, deeply rooted in both engineering and security, makes him an essential component of Beagle Security's mission