PT-2022-20648 · Montala · Resourcespace
CVE-2022-31260
·
Published
2022-07-17
·
Updated
2024-03-06
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Montala ResourceSpace versions prior to r19636
Description
The issue allows attackers to export collection metadata via a non-NULL
k value in the csv export results metadata.php file.Recommendations
For versions prior to r19636, update to a version that includes the fix for this issue, as the specific fixed version is not provided in the available data.
Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Resourcespace