| Package | Affected versions | Patched versions |
|---|---|---|
| org.springframework.data:spring-data-mongodb | ≥ 3.4.0, < 3.4.1< 3.3.5 | 3.4.13.3.5 |
| spring data mongodb | = 3.4.0≤ 3.3.4 |
A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free