In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...
6.5CVSS6.6AI score0.01862EPSS
SaveExploits1References4
Cvelist•added 2022/07/17 7:57 p.m.•40 views
CVE-2022-31260
In Montala ResourceSpace through 9.8 before r19636, csvexportresultsmetadata.php allows attackers to export collection metadata via a non-NULL k value...