{"metadata": {"vulnerability": "CVE-2022-22980", "count": 38, "kinds": {"milestone": 7, "sighting": 14, "kev": 0, "other": 17}}, "data": [{"timestamp": "2022-01-10T00:00:00Z", "date_only": false, "value": "2022-01-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-22980", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-06-21T00:00:00Z", "date_only": false, "value": "2022-06-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-571", "record": "CERTFR-2022-AVI-571", "field": "last_revision_date"}, {"timestamp": "2022-06-21T00:00:00Z", "date_only": false, "value": "2022-06-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-571", "record": "CERTFR-2022-AVI-571", "field": "initial_release_date"}, {"timestamp": "2022-06-21T00:00:00Z", "date_only": false, "value": "2022-06-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-571", "record": "CERTFR-2022-AVI-571", "field": "revisions.0.revision_date"}, {"timestamp": "2022-06-21T11:43:30Z", "date_only": false, "value": "2022-06-21T11:43:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2547", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "da47239c-c52b-4261-9563-1e66fcbd4d72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoc of CVE-2022-22980\nURL\uff1ahttps://github.com/trganda/CVE-2022-22980\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2547"}, {"timestamp": "2022-06-21T13:27:29Z", "date_only": false, "value": "2022-06-21T13:27:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2549", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "f3549fa9-30f2-449c-80ab-3c96a555aab5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-22980\u73af\u5883\nURL\uff1ahttps://github.com/kuron3k0/Spring-Data-Mongodb-Example\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2549"}, {"timestamp": "2022-06-21T14:10:11Z", "date_only": false, "value": "2022-06-21T14:10:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/N9snSRs4VLMclgVPhD3yScYsymBJt9qk1pCmQHmorPkY8A", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "88073c89-2d87-433d-95d2-bae8d4755afe"}, {"timestamp": "2022-06-22T06:44:14Z", "date_only": false, "value": "2022-06-22T06:44:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2555", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "8cb73ac3-781f-4ef7-8ae9-f88111103499", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSpring Data MongoDB SpEL\u8868\u8fbe\u5f0f\u6ce8\u5165\u6f0f\u6d1e(CVE-2022-22980) Demo\u73af\u5883\nURL\uff1ahttps://github.com/li8u99/Spring-Data-Mongodb-Demo\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2555"}, {"timestamp": "2022-06-22T08:08:28Z", "date_only": false, "value": "2022-06-22T08:08:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2557", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "b1b42603-1e51-4661-8c8f-defd072504e4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-22980 \u6f0f\u6d1e\u9776\u573a\uff08\u626b\u63cf\u5668\u53ef\u4f7f\u7528\uff09\nURL\uff1ahttps://github.com/jweny/CVE-2022-22980-web-env\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2557"}, {"timestamp": "2022-06-22T08:22:58Z", "date_only": false, "value": "2022-06-22T08:22:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2558", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "ab8090c3-a5d3-43d9-9df2-a0d33c5d0338", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-22980 \u6f0f\u6d1e\u9776\u573a\uff08\u626b\u63cf\u5668\u53ef\u4f7f\u7528\uff09\nURL\uff1ahttps://github.com/jweny/cve-2022-22980-exp\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2558"}, {"timestamp": "2022-06-22T13:56:00Z", "date_only": false, "value": "2022-06-22T13:56:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-22980", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-06-22T13:56:00Z", "date_only": false, "value": "2022-06-22T13:56:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2022-22980", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-06-22T22:24:39Z", "date_only": false, "value": "2022-06-22T22:24:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EX6V4w5SpHpAfIZcExR4z1wZdtm4BIFDlin1KmbFoWap", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "1cc2d5f8-c6f1-4548-a4e5-64297db364f4"}, {"timestamp": "2022-06-23T00:00:00Z", "date_only": true, "value": "2022-06-23", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-22980", "record": "GSD-2022-22980", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-06-23T17:15:00Z", "date_only": false, "value": "2022-06-23T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W24X-87MR-4R23", "record": "GHSA-W24X-87MR-4R23", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-06-23T17:15:00Z", "date_only": false, "value": "2022-06-23T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-22980", "record": "GSD-2022-22980", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-06-23T17:15:12.120Z", "date_only": false, "value": "2022-06-23T17:15:12.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22980", "record": "FKIE_CVE-2022-22980", "field": "published"}, {"timestamp": "2022-06-23T20:39:48Z", "date_only": false, "value": "2022-06-23T20:39:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/45025", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "fbb94fe8-b5af-459b-96ce-0da5b3a747cb", "content": "\u203c CVE-2022-22980 \u203c\n\nA Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/45025"}, {"timestamp": "2022-06-24T00:00:30Z", "date_only": false, "value": "2022-06-24T00:00:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W24X-87MR-4R23", "record": "GHSA-W24X-87MR-4R23", "field": "published"}, {"timestamp": "2022-06-24T12:31:59Z", "date_only": false, "value": "2022-06-24T12:31:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/6263", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "34088506-0434-41da-b267-f041a1722f84", "content": "#exploit\n1. CVE-2021-30983:\nThe curious tale of a fake Carrier app\nhttps://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html\n\n2. CVE-2022-22980:\nSpring Data MongoDB SpEL Expression injection vulnerability through annotated repository query methods\nhttps://github.com/trganda/CVE-2022-22980", "url": "https://t.me/CyberSecurityTechnologies/6263"}, {"timestamp": "2022-06-25T07:21:52Z", "date_only": false, "value": "2022-06-25T07:21:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W24X-87MR-4R23", "record": "GHSA-W24X-87MR-4R23", "field": "modified"}, {"timestamp": "2022-06-29T02:51:42Z", "date_only": false, "value": "2022-06-29T02:51:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6291", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "3cc72d62-0793-4ebc-b58d-f8c09edbc5a5", "content": "#Threat_Research\n1. Analyzing CVE-2022-22980 to discover a real exploitable path in the source code review process with CodeQL\nhttps://infosecwriteups.com/analyzing-cve-2022-22980-to-discover-a-real-exploitable-path-in-the-source-code-review-process-with-145d97717656\n2. Commonly existing PLC Supply Chain Threats: Multiple critical vulnerabilities in Codesys Runtime (CVE-2022-31805, CVE-2022-31806, CVE-2022-32137)\nhttps://github.com/ic3sw0rd/Codesys_V2_Vulnerability", "url": "https://t.me/CyberSecurityTechnologies/6291"}, {"timestamp": "2022-06-29T07:55:23Z", "date_only": false, "value": "2022-06-29T07:55:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/malwar3s/13", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "d74ed5ae-81f3-429c-b0a2-054674672537", "content": "https://github.com/trganda/CVE-2022-22980", "url": "https://t.me/malwar3s/13"}, {"timestamp": "2022-06-30T00:00:00Z", "date_only": true, "value": "2022-06-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-22980", "record": "GSD-2022-22980", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-06-30T19:13:00Z", "date_only": false, "value": "2022-06-30T19:13Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-22980", "record": "GSD-2022-22980", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1059", "record": "CERTFR-2022-AVI-1059", "field": "last_revision_date"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1059", "record": "CERTFR-2022-AVI-1059", "field": "initial_release_date"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1059", "record": "CERTFR-2022-AVI-1059", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-27T23:55:37Z", "date_only": false, "value": "2023-11-27T23:55:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/614", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "99146f94-9b07-4200-b9cb-8c893825ecb9", "content": "#ExploitObserverAlert\n\nCVE-2022-22980\n\nDESCRIPTION: Exploit Observer has 27 entries related to CVE-2022-22980. A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized.\n\nFIRST-EPSS: 0.010400000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/614"}, {"timestamp": "2023-12-13T01:19:29.203Z", "date_only": false, "value": "2023-12-13T01:19:29.203403Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-22980", "record": "GSD-2022-22980", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-22T00:00:00Z", "date_only": false, "value": "2024-03-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0240", "record": "CERTFR-2024-AVI-0240", "field": "last_revision_date"}, {"timestamp": "2024-03-22T00:00:00Z", "date_only": false, "value": "2024-03-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0240", "record": "CERTFR-2024-AVI-0240", "field": "initial_release_date"}, {"timestamp": "2024-03-22T00:00:00Z", "date_only": false, "value": "2024-03-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0240", "record": "CERTFR-2024-AVI-0240", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-03T03:28:42.620Z", "date_only": false, "value": "2024-08-03T03:28:42.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-22980", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T03:28:42.620Z", "date_only": false, "value": "2024-08-03T03:28:42.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-22980", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:29:17.273Z", "date_only": false, "value": "2026-06-17T04:29:17.273", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22980", "record": "FKIE_CVE-2022-22980", "field": "lastModified"}, {"timestamp": "2026-09-22T07:00:11.358Z", "date_only": false, "value": "2026-09-22T07:00:11.358545Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hfmq1zWepPD91LRghKR-0RSOW6g1tRVTeNiRv4LWNO2cCpY", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "ced32dad-313e-4dd7-a952-d8039b69805b"}, {"timestamp": "2026-09-23T00:00:11.443Z", "date_only": false, "value": "2026-09-23T00:00:11.443458Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hfmq1zWepPD91LRghKR-0RSOW6g1tRVTeNiRv4LWNO2cCpY", "record": "CVE-2022-22980", "field": "creation_timestamp", "uuid": "53b40c1f-5547-4903-8583-61162e3aed85"}]}