CVE-2022-45891: Planetestream Planet Estream

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated uploads (Upload2.ashx) or access content uploaded by other users (View.aspx after Ajax.asmx/SaveGrantAccessList).

Affected products

• Planetestream Planet Estream: before 6.72.10.07 (fixed in 6.72.10.07)

Published 2022-12-25. Last modified 2026-06-17.