CVE-2022-31324: Pentasecurity Wapples

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.

Affected products

• Pentasecurity Wapples: from 4.0.0, before 6.0.r3.4.10 (fixed in 6.0.r3.4.10); version v6.0.r3.4.10 only

Published 2022-09-13. Last modified 2026-06-17.