Vulnerability CVE-2022-22980


Published: 2022-06-23

Description:
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

 References:
https://tanzu.vmware.com/security/cve-2022-22980

Copyright 2022, cxsecurity.com

 

Back to Top