{"id":"CVE-2021-22145","published":"2021-07-21T11:20:52Z","modified":"2025-07-08T10:53:02Z","title":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting","vendor":"Elastic","product":"Elasticsearch","tier":"core","eol":null,"affectedVersions":[{"vendor":"Elastic","product":"Elasticsearch","versions":[">= 7.10.0, <= 7.13.3"]}],"description":{"text":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","provenance":"source","from":"CVE.org"},"summary":{"text":"A memory disclosure flaw exists in the error reporting of Elasticsearch, affecting versions 7.10.0 through 7.13.3. The vulnerable component is the code path that generates error messages returned to queries. An attacker who can submit arbitrary queries to Elasticsearch can send a malformed query that causes an error response containing fragments of a previously used data buffer, which may expose sensitive information such as documents or authentication details. The attack requires only the ability to submit queries to the service, with no user interaction specified.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:16:16Z"},"cvss":null,"epss":{"score":0.76249,"percentile":0.99537,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"Oracle Critical Patch Update Advisory - April 2022","url":"https://otx.alienvault.com/pulse/626040216e00cd388b1b9180","created":"2022-04-20"}],"provenance":"machine"},"cwes":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0006/","tags":["x_refsource_CONFIRM"]},{"url":"https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html","tags":["x_refsource_MISC"]},{"url":"https://gist.github.com/lucasdrufva/f9c5d7c9e26ee087b736d727953afd34","tags":["technical-description"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.elasticsearch.client:elasticsearch-rest-client","vulnerableRanges":[">=7.10.0, <7.13.4"],"patched":["7.13.4"],"from":["GHSA-q394-h7f5-7f44"],"provenance":"source"}],"advisories":[{"id":"GHSA-q394-h7f5-7f44","url":"https://github.com/advisories/GHSA-q394-h7f5-7f44","severity":"MODERATE","ecosystem":"Maven","package":"org.elasticsearch.client:elasticsearch-rest-client","vulnerableRanges":[">=7.10.0, <7.13.4"],"patched":["7.13.4"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-4866","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-4866","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":50149,"url":"https://www.exploit-db.com/exploits/50149","title":"ElasticSearch 7.13.3 - Memory disclosure","type":"webapps","platform":"multiple","date":"2021-07-23","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2021-07-23"},"metasploit":[{"name":"Elasticsearch Memory Disclosure","module":"auxiliary/scanner/http/elasticsearch_memory_disclosure","type":"auxiliary","disclosureDate":"2021-07-21","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure.rb"}],"nuclei":[{"id":"CVE-2021-22145","name":"Elasticsearch 7.10.0-7.13.3 - Information Disclosure","severity":"medium","path":"http/cves/2021/CVE-2021-22145.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22145.yaml"}],"first":{"date":"2021-07-21","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html"],"flow":[],"timeline":[{"date":"2021-07-21","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-22145","provenance":"source"},{"date":"2021-07-21","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2021-07-23","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure.rb","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":25.6,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.91,"detail":"percentile 0.9954"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 NVD exploit link; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-fasterxml-jackson-core-cve-2021-22145","children":[{"from":"CVE-2021-22145","to":"CVE-2025-49128","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"osv-related","provenance":"source","id":"GHSA-wf8f-6423-gfxg","via":"reference","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22145"}]}]}}