Spring_cve-2022-22980

Springcve-2022-22980 spring data mongodb リモートコード実行 | cve-2022-22980 poc 説明 Spring Data MongoDB アプリケーションは、入力がサニタイズされていない場合、@Queryや@Aggregationアノテーションが付与されたクエリメソッドで、値のバインディングのためにクエリパラメータプレースホルダを含むSpEL式を使用すると、SpEL インジェクションに対して脆弱性があります。 ビデオ POC 最新のエクスプロイト PoC についてはフォローしてください YouTube Twitter...

Spring-Data-Mongodb-Demo

Spring-Data-Mongodb-Demo CVE-2022-22980環境...

CVE-2026-41717

A flaw was found in Spring Data MongoDB. A remote attacker can exploit a SpEL Spring Expression Language expression injection vulnerability. This issue arises during parameter binding when a user-defined repository query method is annotated with @Query and uses a capture-all placeholder. Successf...

CVE-2022-22980

CVE-2022-22980 Spring Data MongoDB SpEL式インジェクション MongoDB は、大量のデータストレージに使用される、スケーラブルかつ柔軟性のあるドキュメント指向のNoSQLデータベースです。従来のリレーショナルデータベースのようにテーブルや行を使用する代わりに、MongoDBはコレクションとドキュメントを利用します。ドキュメントはキーと値のペアで構成され、MongoDBにおけるデータの基本単位です。 Spring Data for MongoDB は、包括的なSpring...

Spring-Data-Mongodb-Example

Spring-Data-Mongodb-Example CVE-2022-22980环境 Build docker environment root@kitploit: docker build -t mongo . docker run -dit -p 6666:6666 mongo Poc root@kitploit: ➜ Spring-Data-Mongodb-Example git:main curl 0:6666/v1/user/get -d 'id=Tjava.lang.Runtime.getRuntime.exec"touch /tmp/aaaa"'...

cve-2022-22980

spring-data-mongodb-cve-2022-22980-exp 鶏肋（取るに足らない）脆弱性。単なる記録。 1. Redisを起動し、27017ポートを使う 2. プロジェクトを起動し、Spring Bootを6666ポートで起動する 3. root@kitploit: GET /v1/user/get?username=Tjava.lang.Runtime.getRuntime.exec'open+-a+calculator.app' HTTP/1.1 Host: localhost:6666 Accept-Encoding: gzip, deflate Accept: ...

ROOT-APP-MAVEN-CVE-2026-41717 CVE-2026-41717 in org.springframework.data:spring-data-mongodb - Patched by Root

Root has patched CVE-2026-41717 in the org.springframework.data:spring-data-mongodb package for Root:Maven. Multiple fixed versions available...

Expression Language (SpEL) Injection

Spring Data MongoDB is vulnerable to Expression Language SpEL Injection. The vulnerability is due to improper handling of user-supplied values during parameter binding in @Query repository methods using a capture-all placeholder, which allows an attacker to inject and execute malicious SpEL...

CVE-2026-41696

A flaw was found in Spring Data MongoDB. Repository query methods that use regular expression regex parameter binding perform insufficient validation of the bound parameter. A remote attacker can exploit this by supplying a crafted string, which could lead to breaking out of the intended regular...

NoSQL Injection

Spring Data MongoDB is vulnerable to NoSQL Injection. The vulnerability is due to insufficient validation of parameters bound to regular expressions in @Query-annotated repository methods, where attacker-controlled input can break out of the intended regex quoting e.g., ^\Q?0\E$ and manipulate...

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' via parameter binding when a repository query method is annotated with @Query and uses a capture-all placeholder. An...

EUVD-2026-35900

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

EUVD-2026-35892

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

GHSA-HC43-M36C-8V33 Spring Data MongoDB Has Regex Parameter Binding Injection in @Query Repository Methods

Spring Data MongoDB repository query methods annotated with @Query that use regex parameter binding perform insufficient validation of the bound parameter. An attacker can supply a crafted string to break out of the intended regular expression quoting. Affected versions: Spring Data MongoDB 5.0.0...

Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

GHSA-5WHC-4Q84-FJ73 Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

CVE-2026-41717

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...

VMware Spring Data MongoDB 安全漏洞

VMware Spring Data MongoDB is a MongoDB data access framework developed by the American company VMware. There is a security vulnerability in VMware Spring Data MongoDB, which stems from insufficient validation of bound parameters in repository query methods using the @Query annotation and regular...

CVE-2026-41717 Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding

Spring Data MongoDB contains a SpEL Spring Expression Language expression injection vulnerability. The issue occurs during parameter binding when a user-defined repository query method is annotated with @Query and utilizes a capture-all placeholder. Affected versions: Spring Data MongoDB 5.0.0...