Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb

🗓️ 18 Feb 2026 10:21:33Reported by EliasdekiniweekType

SpEL based remote code execution in Spring Data MongoDB via /search tracking_id parameter.

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb	13 Jul 202214:07	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb	21 Jun 202211:39	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js and Spring Data MongoDB	28 Nov 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Data MongoDB might affect IBM Storage Copy Data Management. [CVE-2022-22980]	22 Mar 202416:05	–	ibm
ATTACKERKB	CVE-2022-22980	23 Jun 202217:15	–	attackerkb
BDU FSTEC	The vulnerability of software for unifying and simplifying access to Spring Data MongoDB databases, related to errors in processing SpEL expressions, allows a perpetrator to execute arbitrary code.	23 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-22980	21 Jun 202211:43	–	circl
CNNVD	Spring Data MongoDB 安全漏洞	23 Jun 202200:00	–	cnnvd
CVE	CVE-2022-22980	22 Jun 202213:56	–	cve