CVE-2022-45895: Planetestream Planet Estream

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure).

Affected products

• Planetestream Planet Estream: before 6.72.10.07 (fixed in 6.72.10.07)

Published 2022-12-25. Last modified 2026-06-17.