← Database

CVE-2022-31324

MEDIUM CVSS: 6.5 Published: 2022-09-13 Modified: 2026-06-17

Description

An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.

Affected Platforms

Pentasecurity Wapples

Weakness Type

CWE-494

References