CVE-2022-22980: Improper Neutralization of Special Elements used in an Expression Language Statement

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

SpEL Injection Attacks

spring-data-mongodb is vulnerable to Spring Expression Language SpEL injection. The vulnerability exists due to the non-sanitized input in the repository query method, allowing an attacker to inject and execute malicious SpEL to the repository query method when it is annotated with @Query or...

PT-2022-3045

Name of the Vulnerable Software and Affected Versions Spring Data MongoDB affected versions not specified Description The issue is related to errors in processing SpEL expressions, which can be exploited by a remote attacker to execute arbitrary code by sending a specially crafted SpEL request...

Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980)

Updates 06-20 CVE-2022-22980 is published 06-20 Spring Data MongoDB 3.4.1 and 3.3.5 are available Table of Contents Overview Vulnerability Am I Impacted Status Suggested Workarounds Overview We would like to announce that we have released Spring Data MongoDB 3.4.1 and 3.3.5 to address the followi...

Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized. Specifically, an application is vulnerable when all of the...

GHSA-4926-QPXG-6R3W Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

Exposure of Resource to Wrong Sphere in Spring Data REST

In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a configured base API path and a controller type-level request mapping are additionally exposed under URIs that can potentially be exposed for...

br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

br.com.anteros:anteros-keycloak (1.0.0), com.github.paulcwarren:content-rest-spring-boot-starter (>=v1.2.0, <=1.2.4) +33 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.4.0, <=3.4.13)

org.springframework.data:spring-data-rest-core MAVEN version =3.4.0, =v1.2.0, =v1.2.0, =v1.2.0, =1.5.0, =1.5.0, =1.5.0, =0.0.2.1, =0.2.2, =0.0.1, =0.2.5, =0.9.0, =0.9.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: GHSA-4926-QPXG-6R3W...

be.personify.iam:personify-api (>=1.2.6.release, <=1.3.1.release), be.personify.iam:personify-frontend (>=1.2.6.release, <=1.3.0.release) +50 more potentially affected by CVE-2021-22047 via org.springframework.data:spring-data-rest-core (>=3.5.0, <=3.5.5)

org.springframework.data:spring-data-rest-core MAVEN version =3.5.0, =1.2.6.release, =1.2.6.release, =1.2.5.release, =2.1.0, =2.1.0, =2.1.0, =5.3.0, =2.1.0, =1.1.0, =2.5.0, =2.5.1 and more Source cves: CVE-2021-22047 Source advisory: OSV:GHSA-4926-QPXG-6R3W...

This Week in Spring - May 17th, 2022

Hi, Spring fans! Welcome to another installment of This Week in Spring! I am in beautiful Barcelona, Spain, this week, ahead of the upcoming Spring I/O show. I just spent a wonderful week in amazing England, meeting old friends, speaking at Devoxx UK, etc. A Bootiful Podcast: EasyMock contributor...

org.springframework.data:spring-data-neo4j-rest (1.0.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.3)

org.neo4j:neo4j MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-rest 1.0.0.release Source cves: CVE-2013-7259 Source advisory: OSV:GHSA-X626-Q4V7-7XC6...

org.springframework.data:spring-data-neo4j-rest (1.1.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.4.1)

org.neo4j:neo4j MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-rest 1.1.0.release Source cves: CVE-2013-7259 Source advisory: OSV:GHSA-X626-Q4V7-7XC6...

org.springframework.data:spring-data-neo4j-aspects (2.0.0.release), org.springframework.data:spring-data-neo4j-cross-store (2.0.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.6.m02)

org.neo4j:neo4j MAVEN version 1.6.m02 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-aspects 2.0.0.release - org.springframework.data:spring-data-neo4j-cross-store...

com.countvajhula:pilot (1.0), org.neo4j:neo4j-graph-collections (0.2) +2 more potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.6)

org.neo4j:neo4j MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - com.countvajhula:pilot 1.0 - org.neo4j:neo4j-graph-collections 0.2 - org.springframework.data:spring-data-neo4j-aspects...

GHSA-XR4V-28RM-PVGW Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA

SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 Gosling SR6 and 1.10.x before 1.10.4 Hopper SR4, when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +554 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.9.5.release)

org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1, =1.4, =1.4, =0.62, =0.79, =0.70, =0.78, =0.84 and more Source cves: CVE-2016-6652 Source advisory: OSV:GHSA-XR4V-28RM-PVGW...

au.com.mountain-pass:hyperstate (>=1, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +554 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.9.5.release)

org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1, =1.4, =1.4, =0.62, =0.79, =0.70, =0.78, =0.84 and more Source cves: CVE-2016-6652 Source advisory: GHSA-XR4V-28RM-PVGW...

au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +102 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.10.0.release, <=1.10.3.release)

org.springframework.data:spring-data-jpa MAVEN version =1.10.0.release, =1, =1, =1, =1, =1, =1.0.0-rc, =1.6, =0.85, =0.85, =0.85, =0.85, =0.89.6 and more Source cves: CVE-2016-6652 Source advisory: OSV:GHSA-XR4V-28RM-PVGW...