CVE-2023-36658: High severity opswat media validation agent vulnerability
Published Sep 15, 2023
·Updated
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally.
Affected Software
2 affected components
OPSWAT Media Validation Agent>=2.0.0<2.0.7
OPSWAT MetaDefender KIOSK>=4.2<4.6.2
Event History
Sep 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-36658?
The severity of CVE-2023-36658 is high.
2
What is the affected software for CVE-2023-36658?
The affected software for CVE-2023-36658 is OPSWAT MetaDefender KIOSK.
3
What is the description of CVE-2023-36658?
CVE-2023-36658 is an issue discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996 where it has an unquoted service path that can be abused locally.
4
How can I fix CVE-2023-36658?
To fix CVE-2023-36658, update OPSWAT MetaDefender KIOSK to a version that resolves the issue.
5
Where can I find more information about CVE-2023-36658?
You can find more information about CVE-2023-36658 in the OPSWAT MetaDefender KIOSK documentation or release notes.