VULNERABILITY INTELLIGENCE

CVE-2022-31324

CVSS score6.5 MEDIUM

EPSS probability0.47%

CISA KEVNot currently listed

Published2022-09-13

Last modified2026-06-17

Description

An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.