Update on Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980)

Background On June 20, 2022 Spring released Spring Data MongoDB 3.4.1 and 3.3.5 to address a critical CVE report: CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods. This vulnerability was originally reported on June 13, 2022. Wallarm SOC team already uses its exploitation in the wild. Vulnerability This vulnerability affects Spring [...]

The post Update on Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980) appeared first on Wallarm.

The post Update on Spring Data …

api security cve data injection mongodb spel spring update vulnerability