Security Advisory
CVE-2025-66525
4.3
MEDIUM
Vulnerability Description
Missing Authorization vulnerability in Elastic Email Elastic Email Sender elastic-email-sender allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Sender: from n/a through <= 1.2.20.
Published Date
December 9, 2025
Official Source
NIST NVD Advisory