CVE-2022-23619

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-23619
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23619.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-23619
Aliases
Published
2022-02-09T21:10:11Z
Modified
2025-10-23T05:11:33.295769Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
Information exposure in xwiki-platform
Details

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to guest users. This problem has been patched on XWiki 12.10.9, 13.4.1 and 13.6RC1. Users are advised yo update. There are no known workarounds for this issue.

Database specific 
{
    "cwe_ids": [
        "CWE-200"
    ]
}
References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type
GIT
Repo
https://github.com/xwiki/xwiki-commons
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
498d9c5b0098754a675e402e51361367db4c7c9c

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type
GIT
Repo
https://github.com/xwiki/xwiki-platform
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494

Affected versions

xwiki-application-calendar-1.*

xwiki-application-calendar-1.0

xwiki-platform-7.*

xwiki-platform-7.3-milestone-2
xwiki-platform-7.4-milestone-1
xwiki-platform-7.4-milestone-2

xwiki-platform-8.*

xwiki-platform-8.0-milestone-1
xwiki-platform-8.0-milestone-2
xwiki-platform-8.1-milestone-1
xwiki-platform-8.1-milestone-2
xwiki-platform-8.2-milestone-1
xwiki-platform-8.2-milestone-2
xwiki-platform-8.3-milestone-1

xwiki-platform-9.*

xwiki-platform-9.9-rc-2

xwiki-plugin-tag-1.*

xwiki-plugin-tag-1.1

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPassword",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "254593883270974829442839810030857090923",
            "length": 1049.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-18fcc7cc"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "sendResetPasswordEmailRequest",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "143422469533253607580464145020614235144",
            "length": 1251.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-330ce1af"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "checkVerificationCode",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "139238221550136403968328508203034944186",
            "length": 1464.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-364a91d4"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "138410723555555701875582937744413504698",
                "163947184865210060278882038117424122242",
                "245665333961712026404052289761534887653",
                "236273279287203355890769864569226908666",
                "260820823747241568294987026593563848662",
                "337008760381718170696707038702385864632",
                "237518644168457345812001977199488942441",
                "327219129166130841388610334028318773976",
                "135485488073685204359210595218108996774",
                "132425208902712487467517034887888982530",
                "237499239517633260843716418532684854797",
                "114981088572629802805687594494846500244",
                "282584111078032757875680774540138078642",
                "324218579390991653706748899867715320207",
                "315423092466324167462852888127636140555",
                "30584587213142902972153208626010345669",
                "260820823747241568294987026593563848662"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-39ff3c17"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPassword",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "55374407950235074585666794219088215310",
            "length": 517.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-46c9c443"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPasswordNoEmail",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "239007912057923947210149776444460196784",
            "length": 441.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-563e22cc"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPasswordUnexistingUser",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "292071381692347823653379257392887035043",
            "length": 526.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-5c3fce83"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "checkUserReference",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "14915910115023918644178196296490555256",
            "length": 378.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-62333f3f"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPassword",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "2752453902863807163410918285573210697",
            "length": 1231.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-62a346ff"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPasswordWithoutPR",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "203754774485538115548169853398654838087",
            "length": 384.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-6ded5a67"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "326861233238980515745626430161754668877",
                "64694730011443345031079325128452555286",
                "64331500901031286530116864835217661057",
                "42741942578737032821591292664455295397",
                "225559120713266195421745190885648758751",
                "114069729190573978099319856589592817580",
                "88730416243340424232394229167675484237",
                "308235930797801263987051604559912952887",
                "43984294380266134015688530253788224441",
                "250178815391151406554629407533364396413",
                "104334265262623386663600894137452754262",
                "155902064098480328535876064715716592325",
                "105787123406870835022384621319119564932",
                "102774701690052333652084250810033221499",
                "151636765463423927451158851305454579568",
                "13833538922462606426954516375610598230",
                "17536834309677634514040186700382462833",
                "259345884953753779995946395441973783538",
                "275420743313810518803735907272354755789",
                "165929629419948324314631184117052452746",
                "157051836744544433061954458483407268561",
                "305226126425268243805994498988513412080",
                "101954306507452549763935915947183415653",
                "126059935594087171713185992937535591514",
                "79442722385961655029917158319222621181",
                "125573994417559272896802246392418182127",
                "267737588922337324087599118804342162839",
                "260386316029854029892080673841433478947",
                "120256946903301964276643729193258854835",
                "59278318351394715272467937930832943752",
                "301248982610541140979247595849916178936",
                "37575016579168115463895491020429333270",
                "242161142544810597716627599887378468323",
                "127756169255262575470826098542306751691",
                "68106963827330120338350997695868978879",
                "298324477577244805368144860171310152411",
                "218229749198015993732724454366033560526",
                "44409445568534234940861091166139900235",
                "325736158127244042902400560644891524852",
                "310828544595537824972187745683456027985",
                "31249332889381973764663278931476278624",
                "83422153155314776716825672261464678878",
                "127756169255262575470826098542306751691",
                "68106963827330120338350997695868978879",
                "29152105981790268495654693796958752132",
                "46838376895638759560646009986912531817",
                "251731883275279218324018102849413504695",
                "27552333383388656473168904163617625361",
                "85142448574658606805669244285590421967",
                "271329563701753566518157064909208479600",
                "75761560494110478197924107290931264926",
                "47378950480439488371930780175427642126",
                "299955337288081891580455068593614298081",
                "278654860316599553908300659300283110649",
                "91890133967543384375869951551362478981",
                "277990362212816895960433727239447624255",
                "277624941352231475125773087243253564792",
                "105858047199129153565785507703353087865",
                "60845209624345094570223211080828015098",
                "46477102508824396029748732121263288852",
                "29371956241676369402347092075043534608",
                "189309176466432420950678671973587774864",
                "132795778097007264357999479146854906417",
                "293857050495337301612447366154402642167",
                "165937599515074582339292114108653083237",
                "99088906017293668575473528879929282844",
                "260386316029854029892080673841433478947",
                "120256946903301964276643729193258854835",
                "59278318351394715272467937930832943752",
                "301248982610541140979247595849916178936",
                "245521341979171379119013260054202659651",
                "224680497188514801241558546214713592478",
                "94911071356627536289910067865923133673",
                "150708182470016796063717816872386802971",
                "283850746618272366147423074352559567793",
                "260386316029854029892080673841433478947",
                "120256946903301964276643729193258854835",
                "59278318351394715272467937930832943752",
                "301248982610541140979247595849916178936",
                "44133099161100788191419590500207446903",
                "88380332855276572043854087889448276357",
                "294038185251023752114374878011864026334",
                "96510390275090513997407381989142172278",
                "116543697864755515133563925512260297685"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-78cdfbc5"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "resetPassword",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "286768099371248816692768251598920646973",
            "length": 717.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-81fb4ff9"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "checkVerificationCodeUnexistingUser",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "212469733274861537802463880759063589618",
            "length": 540.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-88ce537d"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "requestResetPassword",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "163461922053695622568846902229834121776",
            "length": 297.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-8e4a3b49"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "hashCode",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "2531407496267474294859334456081305772",
            "length": 157.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-9994e4f8"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "sendResetPasswordEmailRequest",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "39719630839743260205975960477327206848",
            "length": 1334.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-9a768939"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-api/src/main/java/org/xwiki/security/authentication/ResetPasswordRequestResponse.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "170471661335640466333942474474936449475",
                "257827497369873355759853356151618487863",
                "252832784033762474138397997196177395103",
                "225408180155263446389759285592446193570",
                "187236243080395464725590014578733969254"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-a0fc5cac"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "203641881120789564856815820026740852761",
                "79553928525136377583139208050381578488",
                "231135040382613063334493614457526458045",
                "141926469565892083166600724362198132866",
                "236570179913261123143406628247104702832",
                "146318242265926065936811964571161702982",
                "177809922470373785634394601904294498517",
                "55744842708064151038120571549928073818",
                "155803875379898137052815750183915828366",
                "146137283274644538743620409568071532212",
                "307691326353388493645350178370171217100",
                "266592341973469487032856649958946471733",
                "236058728020839113382288522447262250354",
                "291156837991034234364318313550215791911",
                "144175654503341149958379559295027500606",
                "80145462798870095395433885084287111013",
                "3569243126867128643992421792932740690",
                "93596277829548710033506070055306224139",
                "70429875622564262096793354388607314336",
                "176457796712658381406011787217984778881",
                "160056760950150148486804417832023774790",
                "226416555875649489090733304612561880722",
                "203032380344404122112022153461293287149",
                "318641118737492075462762903326325154496",
                "258958307335810735482728544442107180096",
                "56475079908676758403610715664774739486"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-b6c11fe8"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "equals",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "219102778253456836124970435880892884507",
            "length": 375.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-c07dd09d"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ResetPasswordPage.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "306896108479805414054904188255569385916",
                "138562523087616960715167776619682336571",
                "329022896558940498054845527348545259339",
                "332823765817170525191226540523133062430"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-ca4acf61"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "resetPasswordUnexistingUser",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "199787610247744210211323802536091331026",
            "length": 561.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-cf5f3e2b"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "DefaultResetPasswordRequestResponse",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "26594413874101321712582285549372936424",
            "length": 133.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-e8df2f7c"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "251206160873673586887050640323971437995",
                "10009587120425894543347705860024625408",
                "192212611705770093712394765293819689346",
                "156028083715141930031026929226526661321",
                "135940000467429469764630694344494788715",
                "58972877785623107195359615981823515740",
                "276688254572987450694522423338695359348",
                "117244869544688058138596692609964358842",
                "127071041109772853460186247700771361529"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-e8fbceec"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "checkVerificationCode",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "274820917369770920987405821220923868140",
            "length": 1415.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-eca78467"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "87364051069233157965068187794440017214",
                "271400081793227358555630048785093934719",
                "241664299832195542628095514575991625163",
                "53935135985501375053106787534524114759",
                "232301979016722836946784370783413792419",
                "215390385625626519155023254693587009748",
                "105111243208605390876444201856440205168",
                "21655672387825012261463634041036979877",
                "61908061475833640741126673542755446018",
                "71261190017647061481264340401066151525",
                "153307044419194502992019446602270841165",
                "91280198660345330598679265836529385149",
                "214285991543852246920815961399180576696",
                "314139706840962697056255450889278043864"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-f3ad4eb8"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"
        },
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "188973796435427690122678558590354465456",
                "104007426626019940093516921242109098754",
                "211954934955046511514704603885842441181",
                "84802390069016400785452039478184906826",
                "327524115207656691838235781845464080987",
                "274830277377634866752454396291464601552",
                "121175424252466073267257568094260081828",
                "95785986374023271427629701949338042862",
                "119950107728355642658113724690231146775",
                "227837340517909114602061604992931480652",
                "117399290097365229067961669120836764609",
                "287863201900322695519717095053644832838",
                "250335508218956663341057966721029179611",
                "293009586517501064314549378467845404687",
                "88484428093031466117124586386192252367",
                "76624089706289810197421391139216164438",
                "203416549962315599225742506104354766740",
                "202467203847037910058238128228717487216",
                "121506606891338400790572851626327118746",
                "24682265565293862051142878496519038345",
                "336596009630690729209759428468451185797",
                "137194338330912153424113361356940740553",
                "134961781597291707698064361547715218201",
                "295808502312813417990599216112537753968",
                "268872031245624970339511725591154621115",
                "309171515326353332023116956754375954063",
                "99180229429267751919914303468118216260",
                "255813868677239995711348836011710046532",
                "328534008650218938564496504141251511264",
                "38928115181339907167321886104796402228",
                "60962058349745530413400396649341407566",
                "78378754923734857469636732705726666544",
                "323832126203526564527742934188816537316",
                "209533989233729306040797071878664327256",
                "323583610433002018255639178966842711360",
                "140758790099949910410256519756298939050",
                "89941625608381262207091706859551431551",
                "241850314757804190280815322604115249669",
                "269381356701412809681673999693664938919",
                "263452808350961895837849146456215958106",
                "83034337338044058095137263927591405840",
                "108301702887306844902067211625101598235",
                "230432713034732872548099678189887851807",
                "122610978156799868090145132015267362702",
                "210019135048056347153349718851561812514",
                "240200388703300765526598787443678594936",
                "135726101043636955688508962897232933106",
                "202819767382971968794566691488461292744",
                "53737147682651001353377253485743893512",
                "75435551356670033172355923456407629712",
                "291014738086887789564899389510534436897",
                "45191229660738792468449117729005766962",
                "53042946838269495205124460455484410338",
                "191804960390161350203136227104820189322",
                "282847073880063316796936022676418460211",
                "220289593753497037737593831082393508891",
                "255013035668185413796125334685837880982",
                "100053198098565640027910673985554296835",
                "173528745163788823317175272311639361939",
                "300508128805177960938635989357313473855",
                "766593564049874128135039861175621113",
                "289153356026287617094121653981305256980",
                "276983911715128959699420514340875599792",
                "273715074129797155319430411359033166080",
                "22784290919211667754039115917713644942",
                "287433156750065966667414756047807829296",
                "61999250300829162410514365937328230588",
                "101540247421578672112764624964297862349",
                "63437183104753258227466216484801529103",
                "65763504262184412118397407002016730514",
                "268412479390357780070591374945073302343",
                "205357771218528618450031706184854473796",
                "40141178114158661625187306525586720137",
                "40135702467219946599649111107582781622",
                "155987394969260115060318398577964403639",
                "259376056703290605189131818347007399891",
                "205306211025589694354913350647484711302",
                "77489093700852634915299386257974022019",
                "205489335766132744869089424475051951790",
                "59610407827896314525820532949897580564",
                "291562033193393816416059253830995854685",
                "267349865486165679861676550893393833421",
                "334261369241168591711173209265053364682",
                "140193593742968581515169693916690515415",
                "339738666662796012729468773415124749245",
                "281657285477552174608059391209536998171",
                "211641148942745757078327671638541265334",
                "136171046056875600477952419089096117718",
                "70651226471688466749597954804172562402",
                "147008821991814034152308288951347344085",
                "117670900022063954980714078568953220283",
                "299025118234955663113180584384420657384",
                "230587359935208257624490359745874204918",
                "115574138644486026430975135597645770866",
                "333981690898475182636360041220916077818",
                "220587429784415400652368274409245480731",
                "279345279989122686975976541980156218385",
                "298892570193166105813911814776620383755",
                "160112806505789408762065548996895445651",
                "216530329249923398748729324527270552974",
                "45217235796343048499523690637718934272",
                "314823295944846667903578498817341619291",
                "10294839436693783755582488853081524156",
                "87518615958601231810170696309697281326",
                "3158571481029134476254672983309920037",
                "259258150434545159172330918820617749027",
                "273306277727090185247688750702063174077",
                "319473310769565338378034621901327640586",
                "159188753350952860100741038496398357057",
                "259610659486998705798931582756635666561",
                "332394255900658039808907591720308106965",
                "286483973565035789594016666745641719599",
                "139378914684521363265694194936419817387",
                "293449525022332022339692588655080260459",
                "22914407984406881680522041101291116632",
                "116038880471220894320519657450918515674",
                "244864711017732669470509080121868754973",
                "252584138752795765947648296114197354749",
                "30091828569616427037148738206414688017",
                "121141695238675793764009116914649643216",
                "46812459600443265686126856751015572956",
                "91447803478762739602711326174871864",
                "221311956824298173809406347443469391992",
                "5988309914064601951091667194045728851",
                "59785075620453402308570461309699413413",
                "80820909491430619915764569042345154114",
                "75282505193354750030030254676449171794",
                "147008821991814034152308288951347344085",
                "280271632270849290113112685794624410238",
                "27656332021247554783166483054198234470",
                "250145056093468421601762475391629913432",
                "326269956682673591497293080932236802647",
                "308487923515502669908681695109529377360",
                "327589949430421859203968079193338065663",
                "90576602890231816670622566346488979613",
                "256153266954381331551207504636563929037",
                "56261395946095919314262759618067472347",
                "222098884251611851131085530966547361754",
                "284821542584949333297036951700089879379",
                "147455823985592973136678991055018718289",
                "184994328914957260988796469525289880017",
                "299263240756077411129234978163446083876",
                "252620262345507996102452931670852438018"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-f5daf176"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "getUserEmail",
            "file": "xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "235341849210978496302473072382240752829",
            "length": 41.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-faab8870"
    },
    {
        "source": "https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494",
        "target": {
            "function": "resetForgottenPassword",
            "file": "xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java"
        },
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "function_hash": "178680478585473668953496571743198386800",
            "length": 1813.0
        },
        "signature_version": "v1",
        "id": "CVE-2022-23619-fef222ad"
    }
]