Critical severity9.8NVD Advisory· Published Dec 25, 2022· Updated Jun 17, 2026

CVE-2022-45896

Description

Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Media or Upload Document. Upload2.ashx can be used, or Ajax.asmx/ProcessUpload2. This leads to remote code execution.

Affected products

Planetestream/Planet Estream
cpe:2.3:a:planetestream:planet_estream:*:*:*:*:*:*:*:*
Range: <6.72.10.07
Planet/eStreamdescription
Planet Enterprises Ltd/Planet eStreamllm-create
Range: <6.72.10.07

Patches

Vulnerability mechanics

References

sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-planet-enterprises-ltd-planet-estream/-nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000