CVE-2021-22135

score

<0.1

cvss

5.3

epss

1.3%

published

2021-05-13

kev added

—

first seen

2026-10-21

Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw in the suggester and profile API when Document and Field Level Security are enabled, letting attackers disclose documents and fields they should not access, exploit requires specific queries to enable profiler and suggester.