CVE-2021-22132

score

<0.1

cvss

4.8

epss

1.2%

published

2021-01-14

kev added

—

first seen

2026-10-21

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure caused by improper storage of HTTP headers in the async search API, letting users with access to the .tasks index retrieve sensitive request headers, exploit requires access to the .tasks index.