4 matches found
Spring_cve-2022-22980
Springcve-2022-22980 تنفيذ التعليمات البرمجية عن بُعد في spring data mongodb | cve-2022-22980 poc الوصف تطبيق Spring Data MongoDB يكون عرضة لـ SpEL injection عند استخدام طرق استعلام مشروحة بـ @Query أو @Aggregation مع تعبيرات SpEL تحتوي على مكانات معلمات استعلام لربط القيم إذا لم يتم تنظيف الإدخا...
CVE-2026-14739
A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code. Mitigati...
Security Bulletin: Vulnerability in Spring Data MongoDB might affect IBM Storage Copy Data Management. [CVE-2022-22980]
Summary IBM Storage Copy Data Management can be affected by a vulnerability in Spring Data MongoDB. A remote attacker could exploit this vulnerability to execute arbitrary code on the system as described by the CVEs in the "Vulnerability Details" section. Vulnerability Details CVEID:CVE-2022-2298...
GHSA-W24X-87MR-4R23 SpEL Injection in Spring Data MongoDB
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...