CVE-2022-32273: Opswat Metadefender

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.

Affected products

• Opswat Metadefender: before 5.1.2 (fixed in 5.1.2)

Published 2022-06-08. Last modified 2026-06-17.