{"action":"Upgrade org.elasticsearch:elasticsearch to 1.4.5 (1.4.x) or 1.5.2 (1.5.x) or later.","affected":[{"fixed":"1.4.5","introduced":"0"},{"fixed":"1.5.2","introduced":"1.5.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2015-3337"],"ecosystem":"Maven","epss":0.3316,"exploited":false,"fixed_versions":["1.4.5","1.5.2"],"ghsa_id":"GHSA-x8q8-4hp5-463w","id":"tcs_01M5N9HZZDCYCX9Z1YZC769JE2","modified_at":"2024-12-07T05:39:54.158518Z","published_at":"2022-05-17T04:12:25Z","references":["https://osv.dev/vulnerability/GHSA-x8q8-4hp5-463w","https://nvd.nist.gov/vuln/detail/CVE-2015-3337","https://www.elastic.co/community/security","https://www.exploit-db.com/exploits/37054","http://packetstormsecurity.com/files/131646/Elasticsearch-Directory-Traversal.html","http://www.debian.org/security/2015/dsa-3241"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-x8q8-4hp5-463w","url":"https://osv.dev/vulnerability/GHSA-x8q8-4hp5-463w"}],"summary":"Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch"}