CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may lead to a denial-of-service condition.
CVE
CVE-2021-22144
Severity
MEDIUM
CVSS
6.5
EPSS
2.18%
Original NVD Description
In Elasticsearch versions before 7.13.3 and 6.8.17 an uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. A user with the ability to submit arbitrary queries to Elasticsearch could create a malicious Grok query that will crash the Elasticsearch node.
Related CVEs
Other vulnerabilities affecting the same vendor(s)