CVE-2022-22980
1 advisory.
Maven/org.springframework.data:spring-data-mongodb CVE-2022-22980: critical 9, EPSS 17.84%
SpEL Injection in Spring Data MongoDB
Action: Upgrade org.springframework.data:spring-data-mongodb to 3.3.5 (3.3.x) or 3.4.1 (3.4.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.4.0 | 3.4.1 | - |
| 0 | 3.3.5 | - |
Fixed versions
| 3.4.1 | 3.3.5 |
Sources
- osv: GHSA-w24x-87mr-4r23
- https://nvd.nist.gov/vuln/detail/CVE-2022-22980
- https://tanzu.vmware.com/security/cve-2022-22980
CVE-2022-22980 · published · modified · JSON