Lucene search
GoogleOSV:CVE-2022-22980HistoryJun 23, 2022 - 5:15 p.m.
CVE-2022-22980
2022-06-2317:15:12
Google
osv.dev
7
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
References
Related
veracode
veracode
SpEL Injection Attacks
2022-06-21 02:43:49
cve
cve
CVE-2022-22980
2022-06-23 17:15:12
nvd
nvd
CVE-2022-22980
2022-06-23 17:15:12
cvelist
cvelist
CVE-2022-22980
2022-06-22 13:56:00
wallarmlab
wallarmlab
Update on Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980)
2022-06-23 07:14:08
API Vulnerabilities Jump Up 3.7x in Q2-2022
2022-07-28 07:38:27
redhatcve
redhatcve
CVE-2022-22980
2022-06-30 18:35:49
spring
spring
Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980)
2022-06-20 12:39:00
This Week in Spring - June 21st, 2022
2022-06-21 07:00:00
githubexploit
githubexploit
Exploit for Expression Language Injection in Vmware Spring Data Mongodb
2022-06-22 07:51:22
Exploit for Expression Language Injection in Vmware Spring Data Mongodb
2022-06-22 07:51:22
Exploit for Expression Language Injection in Vmware Spring Data Mongodb
2022-06-21 11:39:13
prion
prion
Sql injection
2022-06-23 17:15:00
osv
osv
SpEL Injection in Spring Data MongoDB
2022-06-24 00:00:30
github
github
SpEL Injection in Spring Data MongoDB
2022-06-24 00:00:30
ibm
ibm
trellix
trellix
The Bug Report – June 2022 Edition
2022-07-06 00:00:00
The Bug Report – June 2022 Edition
2022-07-06 00:00:00