Lucene search

K
redhatcveRedhat.comRH:CVE-2021-22144
HistoryJul 29, 2021 - 1:19 p.m.

CVE-2021-22144

2021-07-2913:19:55
redhat.com
access.redhat.com
61

0.001 Low

EPSS

Percentile

49.3%

A flaw was found in Elasticsearch. An uncontrolled recursion vulnerability that could lead to a denial of service attack was identified in the Elasticsearch Grok parser. This flaw allows a user who can submit arbitrary queries to Elasticsearch to create a malicious Grok query that crashes the Elasticsearch node. The highest threat from this vulnerability is to system availability.