Security Advisory

CVE-2022-22980

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-06-22 13:56:00

Last updated 2024-08-03 03:28:42

Assigner vmware

CVSS score not scored

State PUBLISHED

Description

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

← Browse all CVEs View on cve.org ↗