Vulnerabilities > Vmware > Spring Data Mongodb > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-06-23 CVE-2022-22980 Expression Language Injection vulnerability in VMWare Spring Data Mongodb
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
network
low complexity
vmware CWE-917
critical
 9.8
9.8