Non notée
CVE-2022-22980 A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query…
Description
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Spring Data MongoDB | Versions non publiées |