CVE-2022-22980 PoC — Spring Data MongoDB 安全漏洞

Description

spring data mongodb remote code execution | cve-2022-22980 poc

介绍

# Spring_cve-2022-22980
spring data mongodb remote code execution | cve-2022-22980 poc

## Description 
A Spring Data MongoDB application is vulnerable to #SpEL #injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

### [Video POC](https://www.youtube.com/watch?v=CTYyadO2IuQ)

## Follow us for latest exploit POC

### [YouTube](https://www.youtube.com/c/vulnmachines)
### [Twitter](https://www.twitter.com/vulnmachines)
### [Facebook](https://www.facebook.com/vulnmachines)
### [LinkedIn](https://www.linkedin.com/company/vulnmachines)

文件快照

备注