← CVE Intelligence

CVE-2022-22980

n/a / Spring Data MongoDB PUBLISHED

Description (CNA)

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

Affected (CNA)

Vendor / productVersions
n/a / Spring Data MongoDBaffected 3.4.0, 3.3.0 to 3.3.4 and Older

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.