CVE-2022-31260: Montala Resourcespace

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.

Affected products

• Montala Resourcespace: before 9.8 (fixed in 9.8); version 9.8 only

Published 2022-07-17. Last modified 2026-06-17.