CVE-2022-45891

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p52

Published

Dec 25, 2022 (Dec 25, 2022)

Modified

Jun 17, 2026

Description

Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList).

Vendors: planetestream
Products: planet estream
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.