CVE-2022-22980 | BDVDB-2026-178709 Detail

Spring Data MongoDB

Description#

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://tanzu.vmware.com/security/cve-2022-22980

Exploit#

No public exploit known

History#

Version 12022-06-22Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.