rapid7/metasploit-framework

View on GitHub
modules/auxiliary/scanner/http/elasticsearch_traversal.rb

Summary

Maintainability
A
2 hrs
Test Coverage

Method run_host has 29 lines of code (exceeds 25 allowed). Consider refactoring.
Open

  def run_host(ip)
    vprint_status("Checking if it's a vulnerable ElasticSearch")

    check_code = check_host(ip)
    print_status("#{check_code.message}")
Severity: Minor
Found in modules/auxiliary/scanner/http/elasticsearch_traversal.rb - About 1 hr to fix

    Method initialize has 27 lines of code (exceeds 25 allowed). Consider refactoring.
    Open

      def initialize(info = {})
        super(update_info(info,
          'Name'           => 'ElasticSearch Snapshot API Directory Traversal',
          'Description'    => %q{
            'This module exploits a directory traversal vulnerability in
    Severity: Minor
    Found in modules/auxiliary/scanner/http/elasticsearch_traversal.rb - About 1 hr to fix

      There are no issues that match your filters.

      Category
      Status