Web: https://securityboulevard.com/2022/06/update-on-spring-data-mongodb-spel-expression-injection-vulnerability-cve-2022-22980/

June 23, 2022, 7:14 a.m. | wlrmblog

Security Boulevard securityboulevard.com

Background On June 20, 2022 Spring released Spring Data MongoDB 3.4.1 and 3.3.5 to address a critical CVE report: CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods. This vulnerability was originally reported on June 13, 2022. Wallarm SOC team already uses its exploitation in the wild. Vulnerability This vulnerability affects Spring [...]


The post Update on Spring Data MongoDB SpEL Expression Injection Vulnerability (CVE-2022-22980) appeared first on Wallarm.


The post Update on Spring Data …

2022 api security cve data injection mongodb on security bloggers network spel spring update vulnerability

More from securityboulevard.com / Security Boulevard

Head of Information Security

@ Canny | Remote

Information Technology Specialist (INFOSEC)

@ U.S. Securities & Exchange Commission | Washington, D.C.

Information Security Manager - $90K-$180K - MANAG002176

@ Sound Transit | Seattle, WA

Sr. Software Security Architect

@ SAS | Remote

Senior Incident Responder

@ CipherTechs, Inc. | Remote

Data Security DevOps Engineer Senior/Intermediate

@ University of Michigan - ITS | Ann Arbor, MI