CVE-2022-45895

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p52

Published

Dec 25, 2022 (Dec 25, 2022)

Modified

Jun 17, 2026

Description

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure).

Vendors: planetestream
Products: planet estream
Weakness: CWE-668
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.