A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
vmware spring data mongodb |
||
vmware spring data mongodb 3.4.0 |