SpEL Injection Attacks

2022-06-2102:43:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

spring-data-mongodb

spel injection

non-sanitized input

repository query method

@query

@aggregation

parametrized statements

security

EPSS

0.004

Percentile

75.2%

JSON

spring-data-mongodb is vulnerable to Spring Expression Language (SpEL) injection. The vulnerability exists due to the non-sanitized input in the repository query method, allowing an attacker to inject and execute malicious SpEL to the repository query method when it is annotated with @Query or @Aggregation and use parametrized SpEL statements.