← Database

CVE-2022-45891

CRITICAL CVSS: 9.1 Published: 2022-12-25 Modified: 2026-06-17

Description

Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList).

Affected Platforms

Planetestream Planet Estream

Weakness Type

CWE-863, CWE-863

References