RE: https://infosec.exchange/@dotdotslash_bot/117484635177609038
They could have called the company WAPPLE HOUSE, it was right there.
New directory traversal CVE! CVE-2022-51025 - https://www.cve.org/CVERecord?id=CVE-2022-51025 Penta Security Systems - WAPPLES Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via
Infosec Exchangedotdotcoloncolon_bot (Atlassian edition) (@[email protected])Attached: 1 image
New directory traversal CVE!
CVE-2022-51025 - https://www.cve.org/CVERecord?id=CVE-2022-51025
Penta Security Systems - WAPPLES
Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=db_backup and