CVE-2014-3120: Elasticsearch Remote Code Execution Vulnerability
Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution