CVE-2022-32273

4.3 mediumEPSS 0.8%

Medium (4.3) in opswat metadefender. EPSS 0.8% chance of exploitation in the next 30 days.

As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-203
Published: 2022-06-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opswat:metadefender

References

https://docs.opswat.com/mdcore/release-notes
https://opswat.com
https://docs.opswat.com/mdcore/release-notes
https://opswat.com

Check your stack JSON