CVE-2020-7019

score

<0.1

cvss

6.5

epss

1.4%

published

2020-08-18

kev added

—

first seen

2026-10-21

Elasticsearch before 7.9.0 and 6.8.12 contains a field disclosure caused by a flaw in scrolling search with Field Level Security, letting less privileged users leak hidden fields, exploit requires running a scrolling search after a more privileged user.