CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL 표현식 주입 MongoDB는 대용량 데이터 저장을 위해 확장 가능하고 유연한 문서 지향 NoSQL 데이터베이스입니다. 기존 관계형 데이터베이스에서 테이블과 행을 사용하는 대신 MongoDB는 컬렉션과 문서를 사용합니다. 문서는 MongoDB에서 데이터의 기본 단위인 키-값 쌍으로 구성됩니다. Spring Data for MongoDB는 포괄적인 Spring Data 프로젝트의 일부로, 저장소 고유의 기능과 역량을 유지하면서 새로운 데이터 저장소를 위해 친숙...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980環境...

cve-2022-22980

spring-data-mongodb-cve-2022-22980-exp 계륵 같은 취약점, 그냥 기록용. 1. redis 실행, 27017 포트 2. 프로젝트 실행, springboot는 6666 포트에서 실행 3. GET /v1/user/get?username=Tjava.lang.Runtime.getRuntime.exec'open+-a+calculator.app' HTTP/1.1 Host: localhost:6666 Accept-Encoding: gzip, deflate Accept: / Accept-Language:...

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980 환경 Docker 환경 구축 docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb 원격 코드 실행 | cve-2022-22980 poc 설명 Spring Data MongoDB 애플리케이션은 @Query 또는 @Aggregation 어노테이션이 적용된 쿼리 메서드에서 SpEL 표현식에 값 바인딩을 위한 쿼리 매개변수 플레이스홀더를 사용할 때, 입력이 검증되지 않으면 SpEL injection에 취약합니다. 동영상 PoC 최신 익스플로잇 PoC를 팔로우하세요 YouTube Twitter Facebook LinkedIn...

CVE-2026-41717

A flaw was found in Spring Data MongoDB. A remote attacker can exploit a SpEL Spring Expression Language expression injection vulnerability. This issue arises during parameter binding when a user-defined repository query method is annotated with @Query and uses a capture-all placeholder. Successf...

ROOT-APP-MAVEN-CVE-2026-41717 CVE-2026-41717 in org.springframework.data:spring-data-mongodb - Patched by Root

Root has patched CVE-2026-41717 in the org.springframework.data:spring-data-mongodb package for Root:Maven. Multiple fixed versions available...

K000163144: Spring Data vulnerability CVE-2026-41696

Security Advisory Description Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected...

Expression Language (SpEL) Injection

Spring Data MongoDB is vulnerable to Expression Language SpEL Injection. The vulnerability is due to improper handling of user-supplied values during parameter binding in @Query repository methods using a capture-all placeholder, which allows an attacker to inject and execute malicious SpEL...

K000162085: Spring Data MongoDB vulnerability CVE-2026-41717

Security Advisory Description Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions...

CVE-2026-41696

A flaw was found in Spring Data MongoDB. Repository query methods that use regular expression regex parameter binding perform insufficient validation of the bound parameter. A remote attacker can exploit this by supplying a crafted string, which could lead to breaking out of the intended regular...

NoSQL Injection

Spring Data MongoDB is vulnerable to NoSQL Injection. The vulnerability is due to insufficient validation of parameters bound to regular expressions in @Query-annotated repository methods, where attacker-controlled input can break out of the intended regex quoting e.g., ^\Q?0\E$ and manipulate...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via parameter binding when a repository query method is annotated with @Query and uses a capture-all placeholder. An...

EUVD-2026-35900

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

EUVD-2026-35892

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

GHSA-HC43-M36C-8V33 Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

GHSA-5WHC-4Q84-FJ73 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

CVE-2026-41717

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...