Skip to content
OpenAdvisories

Archive

22 June 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2022-22980 Public exploit EPSS 18%

    SpEL Injection in Spring Data MongoDB

    A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.