Vmware: >> Spring Data Mongodb >> 1.1.2 Security Vulnerabilities
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
CVSS Score
9.8
EPSS Score
0.863
Published
2022-06-23