CVE-2021-22134

score

<0.1

cvss

4.3

epss

1.1%

published

2021-03-08

kev added

—

first seen

2026-10-21

Elasticsearch versions 7.6.1 to 7.10.2 contain a document disclosure caused by improper application of security permissions in get requests when Document or Field Level Security is used, letting attackers discover documents and fields they should not access, exploit requires attacker to perform get requests on recently updated documents.