PatchTheCVEplanetestream vulnerabilities
Recent CVEs affecting planetestream products. 8 tracked.
planetestream has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2022-12-25. Highest priority: CVE-2022-45896 (score 56/100).
- CVE-2022-45896 CRITICAL 9.8 UPGRADE Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Me
- CVE-2022-45895 MEDIUM 6.5 UPGRADE Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML s
- CVE-2022-45894 MEDIUM 6.5 UPGRADE GetFile.aspx in Planet eStream before 6.72.10.07 allows ..\ directory traversal to read arbitrary local files.
- CVE-2022-45893 HIGH 8.8 UPGRADE Planet eStream before 6.72.10.07 allows a low-privileged user to gain access to administrative and high-privil
- CVE-2022-45892 MEDIUM 5.4 UPGRADE In Planet eStream before 6.72.10.07, multiple Stored Cross-Site Scripting (XSS) vulnerabilities exist: Disclai
- CVE-2022-45891 CRITICAL 9.1 UPGRADE Planet eStream before 6.72.10.07 allows attackers to call restricted functions, and perform unauthenticated up
- CVE-2022-45890 MEDIUM 6.1 UPGRADE In Planet eStream before 6.72.10.07, a Reflected Cross-Site Scripting (XSS) vulnerability exists via any metad
- CVE-2022-45889 HIGH 7.2 UPGRADE Planet eStream before 6.72.10.07 allows a remote attacker (who is a publisher or admin) to obtain access to al
FAQ
How do I fix planetestream vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is planetestream being exploited right now?
None of the tracked planetestream CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which planetestream CVE should I patch first?
CVE-2022-45896 currently ranks highest (56/100): Planet eStream before 6.72.10.07 allows unauthenticated upload of arbitrary files: Choose a Video / Related Me.