Skip to content

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories

Loading categories

Spring_cve-2022-22980 — spring data mongodb remote code execution | cve-2022-22980 poc | Kitploit

GitHub/vulnmachines/spring_cve-2022-22980

Vulnerability Analysis Code Analysis Exploitation Web Application Exploitation Learning & Education

vulnmachines/spring_cve-2022-22980

Spring_cve-2022-22980

spring data mongodb remote code execution | cve-2022-22980 poc

View Repository

714 years ago

Most Popular

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →

Share

Spring_cve-2022-22980

spring data mongodb remote code execution | cve-2022-22980 poc

Description

A Spring Data MongoDB application is vulnerable to #SpEL #injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.

Video POC

Follow us for latest exploit POC

YouTube

Twitter

LinkedIn