Design/Logic Flaw

2023-09-1505:15:00

PRIOn knowledge base

www.prio-n.com

opswat metadefender

kiosk

unquoted service path

abuse issue

nvd

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.

CPENameOperatorVersion
media_validation_agentge2.0.0
media_validation_agentlt2.0.7
metadefender_kioskge4.2
metadefender_kiosklt4.6.2

Name	Operator	Version
media_validation_agent	ge	2.0.0
media_validation_agent	lt	2.0.7
metadefender_kiosk	ge	4.2
metadefender_kiosk	lt	4.6.2

References

docs.opswat.com/mdkiosk

docs.opswat.com/mdkiosk/release-notes/cve-2023-36658