PT-2022-3045 · Spring · Spring Data Mongodb

Zewei Zhang · Published 2022-06-21 · Updated 2022-06-30 · CVE-2022-22980

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Spring Data MongoDB (affected versions not specified)

Description The issue is related to errors in processing SpEL expressions, which can be exploited by a remote attacker to execute arbitrary code by sending a specially crafted SpEL request. This can occur when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding, if the input is not sanitized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-917

Related Identifiers

BDU:2022-03714

CVE-2022-22980

GHSA-W24X-87MR-4R23

Affected Products

Spring Data Mongodb

References · 20

• 🔥 https://github.com/trganda/CVE-2022-22980 · Exploit
• 🔥 https://github.com/kuron3k0/Spring-Data-Mongodb-Example · Exploit
• 🔥 https://github.com/li8u99/Spring-Data-Mongodb-Demo · Exploit
• 🔥 https://github.com/jweny/cve-2022-22980-exp · Exploit
• 🔥 https://github.com/jweny/cve-2022-22980 · Exploit
• 🔥 https://github.com/Vulnmachines/Spring_cve-2022-22980 · Exploit
• 🔥 https://github.com/murataydemir/CVE-2022-22980 · Exploit
• https://osv.dev/vulnerability/GHSA-w24x-87mr-4r23 · Vendor Advisory
• https://tanzu.vmware.com/security/cve-2022-22980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22980 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22980 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03714 · Security Note
• https://t.me/freedomf0x/16779 · Telegram Post
• https://t.me/offensivetwitter/711 · Telegram Post
• https://t.me/pentestingnews/25015 · Telegram Post