CVE-2022-22980

🗓️ 23 Jun 2022 17:15:12Reported by [email protected]Type

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb	13 Jul 202214:07	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb	21 Jun 202211:39	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Vmware Spring_Data_Mongodb	18 Feb 202610:21	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in Node.js and Spring Data MongoDB	28 Nov 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple vulnerabilties affecting Watson Machine Learning Accelerator on Cloud Pak for Data	12 Dec 202317:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Data MongoDB might affect IBM Storage Copy Data Management. [CVE-2022-22980]	22 Mar 202416:05	–	ibm
ATTACKERKB	CVE-2022-22980	23 Jun 202217:15	–	attackerkb
BDU FSTEC	The vulnerability of software for unifying and simplifying access to Spring Data MongoDB databases, related to errors in processing SpEL expressions, allows a perpetrator to execute arbitrary code.	23 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-22980	21 Jun 202211:43	–	circl
CNNVD	Spring Data MongoDB 安全漏洞	23 Jun 202200:00	–	cnnvd