
CVE-2022-22980
[CVE-2022-22980] Spring Data MongoDB SpEL Expression Injection
code-analysisdatabase-securityeducation+3
54 years ago

[CVE-2022-22980] Spring Data MongoDB SpEL Expression Injection

Case study and POC of CVE-2017-12635: Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation

Proof-of-concept exploit for CVE-2022-24706 targeting Apache CouchDB 3.2.1 and below. Demonstrates remote command execution via Erlang Distribution…