PoC Index

CVE-2022-45895

MEDIUM 6.5EPSS 0.7%

Planet eStream before 6.72.10.07 discloses sensitive information, related to the ON cookie (findable in HTML source code for Default.aspx in some situations) and the WhoAmI endpoint (e.g., path disclosure).

CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.73% chance of exploitation in the next 30 days, 52th percentile
Published
2022-12-25
Updated
2025-04-14

Proof-of-concept exploits (1)

References

Related