CVE-2022-22980
CVE-2022-22980
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Affected products
n/a · Spring Data MongoDBWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →