Vulnerability

CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability

Recently, VMware issued a security bulletin to disclose a SpEL Expression injection vulnerability (CVE-2022-22980) in Spring Data MongoDB. This flaw’s severity is high. The vulnerability affects Spring Data MongoDB applications using repository query methods...