{"schema":"threatline.record/2","record":{"id":"CVE-2025-37727","aliases":["BIT-elasticsearch-2025-37727","GHSA-56r7-h6mw-rcfv"],"summary":"Elasticsearch: Insertion of Sensitive Information into Log File via reindex API","details":"Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the  reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex","categories":["Databases"],"product":"org.elasticsearch.plugin:reindex-client","vendor":"Elastic","ecosystem":"maven","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"range":">= 7.0.0, < 8.18.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"range":">= 8.19.0, < 8.19.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"range":">= 9.0.0-beta1, < 9.0.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"range":">= 9.1.0, < 9.1.5"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-37727","source_modified_at":"2025-10-10T16:34:36.812Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Elasticsearch","vendor":"Elastic","versions":[{"lessThanOrEqual":"7.17.29","status":"affected","version":"7.0.0","versionType":"semver"},{"lessThanOrEqual":"8.18.7","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThanOrEqual":"8.19.4","status":"affected","version":"8.19.0","versionType":"semver"},{"lessThanOrEqual":"9.0.7","status":"affected","version":"9.0.0","versionType":"semver"},{"lessThanOrEqual":"9.1.4","status":"affected","version":"9.1.0","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.0"},{"fixed":"8.18.8"}]}],"versions":["7.0.0","7.0.1","7.1.0","7.1.1","7.10.0","7.10.1","7.10.2","7.11.0","7.11.1","7.11.2","7.12.0","7.12.1","7.13.0","7.13.1","7.13.2","7.13.3","7.13.4","7.14.0","7.14.1","7.14.2","7.15.0","7.15.1","7.15.2","7.16.0","7.16.1","7.16.2","7.16.3","7.17.0","7.17.1","7.17.10","7.17.11","7.17.12","7.17.13","7.17.14","7.17.15","7.17.16","7.17.17","7.17.18","7.17.19","7.17.2","7.17.20","7.17.21","7.17.22","7.17.23","7.17.24","7.17.25","7.17.26","7.17.27","7.17.28","7.17.29"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.19.0"},{"fixed":"8.19.5"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.0-beta1"},{"fixed":"9.0.8"}]}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.0"},{"fixed":"9.1.5"}]}],"versions":[]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"version":"8.18.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"version":"8.19.5"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"version":"9.0.8"},{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:29:10Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"maven","name":"org.elasticsearch.plugin:reindex-client"},"version":"9.1.5"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"version":"8.18.8"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"version":"8.19.5"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"version":"9.0.8"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","source_modified_at":"2026-09-29T21:45:13.828321696Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"org.elasticsearch.plugin:reindex-client","ecosystem":"Maven","purl":"pkg:maven/org.elasticsearch.plugin/reindex-client"},"version":"9.1.5"}],"cvss":5.7,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00247,"percentile":0.15115,"score_date":"2026-10-23"},"published_at":"2025-10-10T09:56:15.234Z","modified_at":"2026-09-29T21:45:13.828321696Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-09-29T21:29:10Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2025-37727","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2025-10-10T16:34:36.812Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-56r7-h6mw-rcfv","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-09-29T21:45:13.828321696Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-37727","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37727","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453"},{"url":"https://github.com/elastic/elasticsearch/commit/e982eef416a5e1c2a4e94236d7d3b33b5c8d07db","source":"GitHub Advisory Database"},{"url":"https://www.elastic.co/guide/en/elasticsearch/reference/8.18/release-notes-8.18.8.html","source":"GitHub Advisory Database"},{"url":"https://github.com/elastic/elasticsearch/commit/0b876b816544ff5ed07fc9d67cc584b58241e116","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-56r7-h6mw-rcfv","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2025-10-10T16:34:28.484931Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-29T21:45:13.828321696Z","content_hash":"b640d03d9e452f75631bcd6500d2ab6d4f60771467d33986efc32a31663bcfdd"}}