Spring Data MongoDB vulnerabilities
We track 1 vulnerability in Spring Data MongoDB products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 23, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Spring Data MongoDB vulnerabilities
- 9.8 Critical severity
Spring Data MongoDB: Improper Neutralization of Special Elements used in an Expression Language Statement
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.