IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
6.4Medium

CVE-2026-41719Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator

Spring Spring Data KeyValue; Spring Spring Data Redis Published: (5 months ago)

Description

A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator. Affected versions: Spring Data KeyValue / Spring Data Redis 4.0.0 through 4.0.5; 3.5.0 through 3.5.11; 3.4.0 through 3.4.14; 3.3.0 through 3.3.16; 3.2.0 through 3.2.15; 3.1.0 through 3.1.14; 3.0.0 through 3.0.15; 2.7.0 through 2.7.19.

Weakness (CWE): CWE-917

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
broadcom spring data keyvalue 2.7.0 – < 2.7.20
broadcom spring data redis 2.7.0 – < 2.7.20
Spring Spring Data KeyValue 4.0.0 – < 4.0.5.1, 3.5.0 – < 3.5.11.1, 3.4.0 – < 3.4.15, 3.3.0 – < 3.3.17, 3.2.0 – < 3.2.16, 3.1.0 – < 3.1.15, 3.0.0 – < 3.0.16, 2.7.0 – < 2.7.20
Spring Spring Data Redis 4.0.0 – < 4.0.5.1, 3.5.0 – < 3.5.11.1, 3.4.0 – < 3.4.15, 3.3.0 – < 3.3.17, 3.2.0 – < 3.2.16, 3.1.0 – < 3.1.15, 3.0.0 – < 3.0.16, 2.7.0 – < 2.7.20

References and patches

CPE matches (NVD) (16)
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 2.7.0 < 2.7.20
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.0.0 < 3.0.16
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.1.0 < 3.1.15
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.2.0 < 3.2.16
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.3.0 < 3.3.17
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.4.0 < 3.4.15
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 3.5.0 < 3.5.11.1
  • cpe:2.3:a:broadcom:spring_data_keyvalue:*:*:*:*:*:*:*:* ≥ 4.0.0 < 4.0.5.1
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 2.7.0 < 2.7.20
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.0.0 < 3.0.16
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.1.0 < 3.1.15
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.2.0 < 3.2.16
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.3.0 < 3.3.17
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.4.0 < 3.4.15
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 3.5.0 < 3.5.11.1
  • cpe:2.3:a:broadcom:spring_data_redis:*:*:*:*:*:*:*:* ≥ 4.0.0 < 4.0.5.1