Security Advisory
CVE-2022-22980
9.8
CRITICAL
Vulnerability Description
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Published Date
June 23, 2022
Official Source
NIST NVD Advisory