Unrated severityNVD Advisory· Published Dec 25, 2022· Updated Apr 14, 2025

CVE-2022-45896

Description

Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.

Affected products

Planet/eStreamdescription
Planet/eStreamllm-fuzzy
Range: <6.72.10.07

Patches

Vulnerability mechanics

References

sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/-mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000