CVE-2022-45891

9.1 criticalEPSS 0.8%

Critical (9.1) in planetestream planet estream. EPSS 0.8% chance of exploitation in the next 30 days.

Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList).

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-11-01)
CWE: CWE-863
Published: 2022-12-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

planetestream:planet_estream

References

https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/

Check your stack JSON