CVE-2022-22980

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

cn.airfei.air-core:core (3.0.0), com.alpactech:mt-mongo (1.0.0) +40 more potentially affected by CVE-2022-22980 via org.springframework.data:spring-data-mongodb (3.4.0)

org.springframework.data:spring-data-mongodb MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - cn.airfei.air-core:core 3.0.0 - com.alpactech:mt-mongo 1.0.0 -...

CVE-2022-22980

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

CVE-2022-22980

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

CVE-2022-22980

CVE-2022-22980 is a SpEL injection flaw in Spring Data MongoDB where @Query/@Aggregation queries containing parameter placeholders can be exploited if input isn’t sanitized. Public advisories (VMware/Spring/TENABLE, IBM, Red Hat, OSV) confirm remote code execution risk and provide fixes: upgrade ...

CVE-2022-22980: Improper Neutralization of Special Elements used in an Expression Language Statement

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

SpEL Injection Attacks

spring-data-mongodb is vulnerable to Spring Expression Language SpEL injection. The vulnerability exists due to the non-sanitized input in the repository query method, allowing an attacker to inject and execute malicious SpEL to the repository query method when it is annotated with @Query or...

PT-2022-3045

Name of the Vulnerable Software and Affected Versions Spring Data MongoDB affected versions not specified Description The issue is related to errors in processing SpEL expressions, which can be exploited by a remote attacker to execute arbitrary code by sending a specially crafted SpEL request...

Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980)

Updates 06-20 CVE-2022-22980 is published 06-20 Spring Data MongoDB 3.4.1 and 3.3.5 are available Table of Contents Overview Vulnerability Am I Impacted Status Suggested Workarounds Overview We would like to announce that we have released Spring Data MongoDB 3.4.1 and 3.3.5 to address the followi...

Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...

br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

GHSA-4926-QPXG-6R3W Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

This Week in Spring - May 17th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc. A Bootiful Podcast: EasyMock contributor...

org.springframework.data:spring-data-neo4j-rest (1.1.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.4.1)

org.neo4j:neo4j MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-rest 1.1.0.release Source cves: CVE-2013-7259 Source advisory: OSV:GHSA-X626-Q4V7-7XC6...

com.countvajhula:pilot (1.0), org.neo4j:neo4j-graph-collections (0.2) +2 more potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.6)

org.neo4j:neo4j MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - com.countvajhula:pilot 1.0 - org.neo4j:neo4j-graph-collections 0.2 - org.springframework.data:spring-data-neo4j-aspects...

org.springframework.data:spring-data-neo4j-rest (1.0.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.3)

org.neo4j:neo4j MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-rest 1.0.0.release Source cves: CVE-2013-7259 Source advisory: OSV:GHSA-X626-Q4V7-7XC6...