Downport fix for CVE-2022-22980 to 3.2.x

[henrikplate]

This is a downport of the fix for vulnerability CVE-2022-22980 to branch 3.2.x.

The patch is identical to the fix provided for 3.3.x and later versions, the respective commit 7c5ac76 has been cherry-picked.

It has been tested through the downported unit test included in the same commit.

Disclaimer and background:

• It is clear that the given version is EOL, i.e. the project may not release a new version containing the patch, and the project generally advises users to migrate to later, supported versions. However, this fix could be a temporary remedy for users struggling to perform this migration (whatever the reason).
• This fix is part of Endor Labs' efforts to create minimal invasive, yet viable security fixes for older OSS versions, similar to the well-known and established approach followed by various Linux distributions.
• By sharing the patch with the project community, we also hope to receive input as to whether the proposal is viable. It is clear, however, that the time of open source maintainers is limited. Hence, we appreciate any feedback given, but also understand if you cannot find the time to comment on merge requests opened for EOL versions.

---

• You have read the Spring Data contribution guidelines.
• You use the code formatters provided here and have them applied to your changes. Don’t submit any formatting related changes.
• You submit test cases (unit or integration tests) that back your changes.
• You added yourself as author in the headers of the classes you touched. Amend the date range in the Apache license header if needed. For new types, add the license header (copy from another file and set the current year only).