Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-22980 — Proof-of-concept exploit for CVE-2022-22980 targeting Spring Data MongoDB. Demonstrates remote code execution via crafted MongoDB queries. Requires local MongoDB instance. | Kitploit
Tools/GitHubGitHub/trganda/cve-2022-22980
Vulnerability AnalysisExploitationWeb Application ExploitationDatabase Security
GitHubtrganda/cve-2022-22980

CVE-2022-22980

Proof-of-concept exploit for CVE-2022-22980 targeting Spring Data MongoDB. Demonstrates remote code execution via crafted MongoDB queries. Requires local MongoDB instance.

View Repository
32824 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-22980

A local based poc of CVE-2022-22980, for the detail of this vulnerability see https://tanzu.vmware.com/security/cve-2022-22980.

You need to install mongodb on locahost before running.

And I've create a web based poc with docker on dockerv

Run

root@kitploit:~
mvn spring-boot:run

or open with IDEA, and launch the AccessingDataMongodbApplication

Download Tool