6.4Mittel
Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator
Spring Spring Data KeyValue; Spring Spring Data Redis
A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis …