[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffwLJnFs2Z4jugx6itykYDtK8Cau7S_1up8ew82IBCmI":3,"g5a-risk:CVE-2021-22144":134},{"success":4,"data":5,"meta":132},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":55,"references":56,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":27,"otxData":27,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":130,"notableEvents":131},"CVE-2021-22144","What is CVE-2021-22144?","In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.","In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in th...","2021-07-26T12:15:08.547","2022-05-10T18:02:50.073",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:N\u002FA:P","SINGLE","PARTIAL",4,8,2.9,0.02442,[42,42,40,40,40,40,40],0.0218,"Medium",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"elastic","elasticsearch","*","cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"oracle","communications_cloud_native_core_automated_test_suite","1.8.0","cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*",2,[57,63,68],{"url":58,"source":59,"tags":60},"https:\u002F\u002Fdiscuss.elastic.co\u002Ft\u002Felasticsearch-7-13-3-and-6-8-17-security-update\u002F278100","Elastic",[61,62],"Release Notes","Vendor Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210827-0006\u002F","Netapp",[67],"Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuapr2022.html","Oracle",[72,67],"Patch",3,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-674","Uncontrolled Recursion","The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","","Draft","Class","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2021-22144? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-22144, a medium severity cyber security vulnerability from 2021. In Elasticsearch versions before 7.13.3 and 6.8.17 an unc...","CVE-2021-22144, CVE-2021-22144 vulnerability, CVE-2021-22144 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, elastic security, oracle security, elasticsearch vulnerability, communications_cloud_native_core_automated_test_suite vulnerability","\u002Fwhat-is\u002Fcve-2021-22144",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-22144","Cybersecurity","CVE-2021-22144, CVE-2021-22144 vulnerability, CVE-2021-22144 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,124],{"Operator":27,"Negate":27,"Nodes":113},[114],{"Operator":115,"Negate":27,"CPEMatch":116},"OR",[117,120],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":119,"VersionEndIncluding":27},"9FE3115F-9BC0-44F8-A0EC-0D42CCDA30AB","6.8.17",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":27},"68D4C16A-16D0-46C7-9133-AD04AED5EFE1","7.0.0","7.13.3",{"Operator":27,"Negate":27,"Nodes":125},[126],{"Operator":115,"Negate":27,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"98FB24DB-AF91-48D0-9CA5-C8250D183FD5",[],[],{"lastModified":11,"cacheTime":133,"version":33},1792260079359,{"score":135,"band":136,"action":137,"scoredAt":138},32,"Low","Monitor","2026-10-16T06:51:41.018686+00:00"]