{"uuid": "a488fc20-2e4f-4043-8173-0c3148d19815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-3120", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/elasticsearch/script_mvel_rce.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"Alex Brasetvik\", \"Bouke van der Bijl\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a remote command execution (RCE) vulnerability in ElasticSearch,\\n          exploitable by default on ElasticSearch prior to 1.2.0. The bug is found in the\\n          REST API, which does not require authentication, where the search\\n          function allows dynamic scripts execution. It can be used for remote attackers\\n          to execute arbitrary Java code. This module has been tested successfully on\\n          ElasticSearch 1.1.1 on Ubuntu Server 12.04 and Windows XP SP3.\", \"disclosure_date\": \"2013-12-09\", \"fullname\": \"exploit/multi/elasticsearch/script_mvel_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"ElasticSearch Dynamic Script Arbitrary Java Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/elasticsearch/script_mvel_rce.rb\", \"platform\": \"Java\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/elasticsearch/script_mvel_rce\", \"references\": [\"CVE-2014-3120\", \"OSVDB-106949\", \"EDB-33370\", \"URL-http://bouk.co/blog/elasticsearch-rce/\", \"URL-https://www.found.no/foundation/elasticsearch-security/#staying-safe-while-developing-with-elasticsearch\"], \"rport\": 9200, \"session_types\": false, \"targets\": [\"ElasticSearch 1.1.1 / Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:38.415219Z"}