CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability

balajim1 — Wed, 29 Jan 2025 16:38:32 GMT

Hi,

Is any of Qliks products affected by the security issue called Spring Data MongoDB SpEL Expression injection vulnerability(CVE-2022-22980)?

If so, what products and how to mitigate?

Regards,

Balaji

Re: CVE-2022-22980: Spring Data MongoDB SpEL Expression injection vulnerability

Albert_Candelario — Sun, 10 Jul 2022 14:24:49 GMT

Thanks for posting.

Have you seen any reference on Qlik products to Spring Data MongoDB?

I cannot recall any of our products using such application and if you have a products that uses it you need to upgrade to:

Cheers,

Albert