{"id":"CVE-2021-22145","aliases":["BIT-elasticsearch-2021-22145","EUVD-2022-4866","GHSA-q394-h7f5-7f44","UBUNTU-CVE-2021-22145"],"status":"published","title":"Generation of Error Message Containing Sensitive Information in Elasticsearch","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.76249,"percentile":0.99539,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-200","CWE-209"],"published":"2021-07-21T11:20:52Z","modified":"2026-10-24T10:30:42Z","exploits":[{"source":"exploitdb","id":"EDB-50149","title":"ElasticSearch 7.13.3 - Memory disclosure","type":"webapps","platform":"multiple","date":"2021-07-23","url":"https://www.exploit-db.com/exploits/50149"},{"source":"metasploit","id":"auxiliary/scanner/http/elasticsearch_memory_disclosure","title":"Elasticsearch Memory Disclosure","type":"auxiliary","date":"2021-07-21","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure"},{"source":"nuclei","id":"CVE-2021-22145","title":"Elasticsearch 7.10.0-7.13.3 - Information Disclosure","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22145.yaml"},{"source":"pocgithub","id":"niceeeeeeee/CVE-2021-22145-poc","title":"niceeeeeeee/CVE-2021-22145-poc","date":"2023-08-31","url":"https://github.com/niceeeeeeee/CVE-2021-22145-poc"}],"fixes":[{"ecosystem":"Maven","package":"org.elasticsearch.client:elasticsearch-rest-client","fixed_in":["7.13.4"],"sources":["ghsa","osv"]},{"ecosystem":"Bitnami","package":"elasticsearch","fixed_in":["7.13.4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.elasticsearch.client:elasticsearch-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.10.0"},{"last_affected":"7.13.3"},{"fixed":"7.13.4"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"elasticsearch","ranges":[{"type":"SEMVER","events":[{"introduced":"7.10.0"},{"fixed":"7.13.4"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.elasticsearch.client:elasticsearch-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.10.0"},{"fixed":"7.13.4"}]}],"versions":["7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.11.2","7.12.0","7.12.1","7.13.0","7.13.1","7.13.2","7.13.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"elasticsearch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.2+dfsg-1","1.7.3+dfsg-1","1.7.3+dfsg-2","1.7.3+dfsg-3"]}],"products":[{"vendor":"elastic","product":"elasticsearch"},{"vendor":"oracle","product":"communications_cloud_native_core_automated_test_suite"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2022.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","advisory","evidence","web"]},{"url":"https://gist.github.com/lucasdrufva/f9c5d7c9e26ee087b736d727953afd34","tags":["technical-description","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22145","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20210827-0006","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q394-h7f5-7f44"},{"url":"https://github.com/elastic/elasticsearch","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2021-22145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22145","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2021-07-21T11:20:52Z","modified":"2025-07-08T10:53:02.606Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:32:57.701381Z"}],"euvd":[{"id":"EUVD-2022-4866","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2021-07-21T11:20:52Z","modified":"2025-07-08T10:53:02Z","updated_at":"2026-11-02T20:32:13.001759Z"}],"ghsa":[{"id":"GHSA-q394-h7f5-7f44","title":"Generation of Error Message Containing Sensitive Information in Elasticsearch","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2022-05-24T19:08:49Z","modified":"2025-07-09T15:02:18Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-209"],"updated_at":"2026-11-02T14:38:49.837727Z"}],"nvd":[{"id":"CVE-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2021-07-21T15:15:14.063Z","modified":"2026-06-17T03:36:41.77Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-209"],"updated_at":"2026-11-02T14:06:56.185362Z"}],"osv":[{"id":"CVE-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2021-07-21T15:15:14.063Z","modified":"2026-10-24T10:30:42.274241485Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"GHSA-q394-h7f5-7f44","title":"Generation of Error Message Containing Sensitive Information in Elasticsearch","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2022-05-24T19:08:49Z","modified":"2025-07-09T15:17:37.961672Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200","CWE-209"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"UBUNTU-CVE-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2021-07-21T15:15:00Z","modified":"2025-10-24T04:50:07Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:26.29421Z"},{"id":"BIT-elasticsearch-2021-22145","description":"A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.","status":"published","published":"2024-03-06T10:53:12.399Z","modified":"2026-09-08T08:46:27.940705745Z","updated_at":"2026-11-02T15:28:29.563843Z"}]}}