CVE-2022-31324

MEDIUM 6.5CVE-2022-31324 · Published 13/09/2022 · updated 17/06/2026

In short

CVE-2022-31324 is a MEDIUM (CVSS 6.5) vulnerability affecting wapples (pentasecurity).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 41.0% of all vulnerabilities.
Fix: update to 6.0.r3.4.10 or later.

Package	Affected versions	Patched versions
wapples pentasecurity	`= v6.0.r3.4.10≥ 4.0.0, < 6.0.r3.4.10`	`6.0.r3.4.10`

Description

An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.

References

medium.com/%40_sadshade/wapples-web-application-firewall-multiple-vulnerabilities-35bdee52c8fb
pentasecurity.com/product/wapples · Vendor Advisory

More vulnerabilities in wapples

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free