CVE-2023-25158

Source
https://cve.org/CVERecord?id=CVE-2023-25158
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25158.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-25158
Aliases
Published
2023-02-21T20:57:47.754Z
Modified
2026-07-15T16:00:32.587800Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Unfiltered SQL Injection in Geotools
Details

GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore implementations. Users are advised to upgrade to either version 27.4 or to 28.2 to resolve this issue. Users unable to upgrade may disable encode functions for PostGIS DataStores or enable prepared statements for JDBCDataStores as a partial mitigation.

Database specific
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25158.json"
}
References

Affected packages

Git / github.com/geotools/geotools

Affected ranges

Type
GIT
Repo
https://github.com/geotools/geotools
Events
Database specific
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "24.7"
        },
        {
            "introduced": "25.0"
        },
        {
            "fixed": "25.7"
        },
        {
            "introduced": "26.0"
        },
        {
            "fixed": "26.7"
        },
        {
            "introduced": "27.0"
        },
        {
            "fixed": "27.4"
        },
        {
            "introduced": "28.0"
        },
        {
            "fixed": "28.2"
        }
    ]
}

Affected versions

21.*
21.6b
26.*
26.1a
26.1b

Database specific

vanir_signatures_modified
"2026-07-15T16:00:32Z"
vanir_signatures
[
    {
        "target": {
            "function": "getSQL92LikePattern",
            "file": "modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java"
        },
        "digest": {
            "length": 595.0,
            "function_hash": "163755290397782995154414314356763528560"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-02d818e3",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/jdbc/src/test/java/org/geotools/data/jdbc/FilterToSQLTest.java"
        },
        "digest": {
            "line_hashes": [
                "209110513914125057670019774964309617587",
                "250086335152026963046363566467213731088"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-046e8d45",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java"
        },
        "digest": {
            "line_hashes": [
                "65998840243968733630792411207665878276",
                "136395948910669951176977886357071514136",
                "322966140665352483096800457744706823340",
                "6447490896449711609338366091331318625",
                "284032701748269662742541092530623098331",
                "212925241539731358181579747384756889310",
                "204809522209886200295656702351985976693",
                "221717247075283143599858045277125028947",
                "298018206751964531127979305754531163492",
                "286055267729045557495028008029937408967",
                "266687042493357500192883262862798900567",
                "273954843262281514821311445470911875304",
                "277584759005131925808481416224911439571",
                "230096809342980948770975667147141442942",
                "337895703607015457109695763279718994377",
                "252216837450533950195907222753225066391",
                "287020405229437038620402649781249881900",
                "31437074589055244279092767165127965047",
                "109930026561059401989432996677175086756",
                "5831371444802740353934195273658321541"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-05bfc503",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "encodeJsonArrayContains",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"
        },
        "digest": {
            "length": 564.0,
            "function_hash": "176471063969650377984035865217326993959"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-0e1128ad",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"
        },
        "digest": {
            "line_hashes": [
                "123787570644390735525880817816942005449",
                "164095225716398873540067205652830164649",
                "257798280183139329179460084679562916108",
                "80969072333215072296538330500263014987",
                "273437422026148698214736073592000514324",
                "171585600895267335104289484174911376322",
                "125390332270162380296716803571910775900",
                "136587821465593448865763627100145859022",
                "184315645794085865695613713020947383912",
                "225092512294473748696293665865417804526",
                "31546665874475868178273804029764126440",
                "45144903141936491798879918649986395916",
                "326336598317840987262936698228558219570",
                "17816699426210627568174665655468124142",
                "198620217696092834446035390866013589147",
                "299857889327098831211543316939091338113",
                "253254663706906541362342132515208555899",
                "64694466823292855045303097310363607614",
                "71282333520511394771760167646383851742",
                "24532418861948179050786307530871180782",
                "193194219062903523410812657841975432698",
                "209715611957441015648925497267718843132",
                "4701840045240993945528465673204002605",
                "277537104439529475138995454805199162075",
                "303409074881983922825340868074098798976",
                "275826582938133273862916980176988209204",
                "74995006875324462831086506045807064412",
                "284946373842136369432269258529280247102",
                "217571508603587429396605429953230592946",
                "336148578708911109204968815812700612035",
                "277347746715254637365803957747251847071",
                "25380615773319560687437290690123398997",
                "263940640078784970199776690149486859659",
                "99606008305589682567844418074811079766",
                "95836834675306819181284870669722236960",
                "26809114201143607394520977784511873640",
                "51674476199931383611238680883631617048",
                "7335329528841453511696290302027244855",
                "75049934116851457941808371958380803982",
                "149363515311715244844620083803845342244",
                "299917687668051538451473251944195518682",
                "150050245616636575073846402573623244706",
                "267824657837088350165901337730374893046",
                "199034789233459770763886456062978055638",
                "152158944767013969364554668280929296237",
                "325611535906661983838675991749569471648",
                "199254949243010632245109539842765182001",
                "245387674303943398347551118871641063155",
                "212240624503213923121640575087345979616",
                "159115181348154673487380372188935879322",
                "335389178673023557583907042193044223623",
                "108792282162936301521263554340592139027",
                "202618728735553527872611363179914150900",
                "33872707008064366060709444309496799308",
                "305809134895475782887282521532843240625",
                "111092064926313028252494554905337459214",
                "109995667097840593889765859000507429375",
                "215007985297151755838608028682776657184",
                "179780173052421435741175697618600842508",
                "208187428707749874942586792935548116709",
                "128422964793319390744494727546099214126",
                "218804424118165506090376097543472978554",
                "71878926361921571443569627657905787576",
                "83862214205467341378951413213383116181",
                "171974827954301331598265076395810012547",
                "167033372716754291195373460664050639665",
                "173391654103959032675580601826366877640",
                "10596532323663677581254401381033796015",
                "313913392689524297005910540903183808344",
                "130994986805593827749655072714483725275",
                "302271817633992081641866557799836562784"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-139ffcb3",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleDialect.java"
        },
        "digest": {
            "line_hashes": [
                "297831320169566676799372933429591570097",
                "56415513774770953803212204135372923175",
                "272289277610069056426176072757600471862",
                "278604282487832181508620460504683108650",
                "70417362694971342291440768636993126394",
                "66718859536829873084810145357819248330",
                "300219340854471230063084015200696586327",
                "77360264185645965944336199766301885921",
                "77334209169854557707010468552738651921",
                "109259947694729928548030363950900327031",
                "287382573466914253675351114328934623637",
                "254366799748619016154550334746078926064",
                "281679024530974489795264610671321791559",
                "215455063928581831897770055638431758895",
                "44344721945725259049444904898268413406",
                "315240290981314819237730622406548934269",
                "27211865668882225027558798910478833356",
                "196006171449175456192941193890294627630",
                "210394482540587927740267156227569991380",
                "267786690073129632161241761310469275470",
                "240002281256980133721664340579206995993",
                "153837745809604244857836563863236074377",
                "30605565276222300387349520908490413282",
                "129294536086267319367457331093963345081",
                "306805517134974679450440399366877609769",
                "226942355196952599606314342018298481766",
                "267600095963041817815346474175005491561",
                "49445453146729717476237299008671873527",
                "197783900499415278861589641078883443293",
                "293957320058052005032009447085170327889",
                "231224441445308852093910825573853276873",
                "336231372669601798798677889788449743670",
                "165860537504281819710631720970782281900",
                "25292674665909350021042720737835097637",
                "225846119813242256335478224184227295947",
                "32025341388215817939689715305188596026",
                "64195250360856257263702277561246604084",
                "252103598250897479730207916298038856236",
                "241129312945390504138779665646145121490",
                "114278272287726325445236510207095702447",
                "241517753072121970629687792860777193652",
                "201042617089692827201579175936885853165",
                "1330403821291538926726785569102893184",
                "198275711471925514433065427724278463319",
                "276608006977590840548241571508418439500",
                "331182211058931688531553681045735676767",
                "291206366495711166163185676021020460494",
                "283141227502363326076966148770022821378",
                "230731906180052362268124870446012612057",
                "166454369877932903583339145845365146040",
                "122131748596049452504297880944571178558",
                "109781096962421971035619230632799020891",
                "240393105134150898867925623417968966111",
                "173191341926236436644562342770335452474",
                "89173067701342967672783133876281905642",
                "85457733359186552548144688703681556407",
                "263029053562575984200502545635849809917",
                "159871476685655729034491508734680174896",
                "132334141434339087264222966556151630525",
                "13135056028767283598037460615726521962",
                "94453748986910211426796835800948217254",
                "334556455250626119573742930677906151550",
                "306985939371377444807996753023648962318",
                "136560481614850163828223424994166378378",
                "170156116863667254622544236902267276382",
                "66847139890378896898689545137781253330",
                "283944142144991067527124651397159936286",
                "12531151584515819660107440887252237974",
                "219857934433732268537333586835161489908",
                "22516558442150972976642067751700029260",
                "260191200869603541199134685575914499544",
                "179620615078563884781902893605375466367",
                "278164691566707480649065715404930467371",
                "36081824621816115910608309360897014137",
                "42900917647750887022810398972196581041",
                "332560534686736885083641254934972921636",
                "264667847414507440218467159069631227943",
                "129248930795625459809592491012589415049",
                "308246753866093347786776410573203516681",
                "45558507796006482349715769942577746294",
                "162919397143614619017450063426126539099",
                "251179050228986401801776194352960803413",
                "93471628048581959705305943981795538167"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-1d4dabd7",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-mysql/src/main/java/org/geotools/data/mysql/MySQLDialectBasic.java"
        },
        "digest": {
            "line_hashes": [
                "294787456276596766808350279041101325125",
                "291035696945111903181528842260852183451",
                "321124147455889041630393448708968668660",
                "113399573075597836001193508952553998482"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-1dd7ffaa",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "testFunctionJsonArrayContains",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java"
        },
        "digest": {
            "length": 395.0,
            "function_hash": "118223653516967682305786029680819338656"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-25d1fa92",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "createPreparedFilterToSQL",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISPSDialect.java"
        },
        "digest": {
            "length": 203.0,
            "function_hash": "220813096194424391700960108943160929280"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-28a4b777",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/jdbc/src/main/java/org/geotools/jdbc/EscapeSql.java"
        },
        "digest": {
            "line_hashes": [
                "45592682516099818026400648294011093025",
                "309472777026591230381284736588568271791"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-366a6394",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISPSDialect.java"
        },
        "digest": {
            "line_hashes": [
                "37079777887409376026710954859193810747",
                "103348101819502951818653702807898621441",
                "317688671493921487045752116880146431264",
                "317928379051802528984731054667385503696"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-3c77ea0c",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "createDataStoreInternal",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostgisNGDataStoreFactory.java"
        },
        "digest": {
            "length": 1222.0,
            "function_hash": "157517197646415184807539817683662209829"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-3cd171c3",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/main/src/test/java/org/geotools/filter/FilterTest.java"
        },
        "digest": {
            "line_hashes": [
                "213533777429961786192154772047706025840",
                "302325195158184453792414783484846373641",
                "169559134747148105061653202760069507984",
                "211369691695727035920500847761808792035",
                "223154208987578852728241872356331031735",
                "74259187588604117577553404993536056134",
                "28021656071706031537941375708683574423",
                "221321092520255005807422544417750766839",
                "280078618400578543213810516721990141861",
                "232108566013218324402689528120440212999",
                "304615819830661571071472994549682069164",
                "207744349641059350540338497414449106735",
                "138624953557820694444338183746058116763",
                "306374115522656249227889424247573286198",
                "249366089040338745927532783990518602419",
                "24305323051540598904321347028774067890",
                "32624428907814648354946367782260507137",
                "22627217787622228255704080522878080387",
                "127309307286885544369735863240119835569",
                "26495480557130829658134448136448567126",
                "205333172285291298544276663767216447432",
                "133550336524511669469656566652497375168",
                "263537296096262323195666071196880146048"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-3f5dbdfd",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java"
        },
        "digest": {
            "line_hashes": [
                "122513856677672411334650392461749611338",
                "312584303462007626372315890583314868854",
                "170554242962011026266276828908723863318",
                "37649702196132032315093260135102390559",
                "338831411656918445312477385422703139539",
                "49972093140278392010608676034629952280",
                "105828075245556932948891942474446373357",
                "114289740701550195401261201924945737542",
                "120008270131064367234121482424787439963",
                "3609364239062242235350138308150371249",
                "190830151009323644920844724537734750341",
                "197725753723151900111426170008981348992",
                "150923991056115470122543519179863155925",
                "255922016272387090173839799182719438786",
                "63587758975116825346920056673380297045"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-49ce783d",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java"
        },
        "digest": {
            "line_hashes": [
                "250193442859626900160711613258167731999",
                "131711539857755822702926745190355272178",
                "172366429476887660155288187973783616316",
                "326201030866756358465483866883259507233",
                "10254011327543598439242198623955238773",
                "305096352363416503657195272620769543418",
                "30590340844502562931760189336078788013",
                "159449430853369492169958664062437321346",
                "218013756706493927737027481690291101370",
                "215082960664304062000295733110104195795",
                "209717142029933437107622212188368567121",
                "165588918023850290422503831337063144105",
                "7042588577064085306460567787108486795"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-5083108b",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "visit",
            "file": "modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java"
        },
        "digest": {
            "length": 811.0,
            "function_hash": "277614577333743597387872458711341054301"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-514f07bf",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java"
        },
        "digest": {
            "line_hashes": [
                "66242875419099917018887323438309443264",
                "157674059825600171380738145473912188913",
                "309761892918326961227907454189485331824",
                "125548897867696237756862658475995389524",
                "249087331863142555120273573228290579734",
                "150661630902959952988848857115122372289",
                "141321279039899891908352568147075033129",
                "64813762095434644241217683237294006581",
                "22517200136085374198021577484570126703",
                "20475733851611150513900424606032641049",
                "291429505672163383402793713219878925648",
                "281673635677281708799189127392871445295",
                "284306693277290237872661573753215562951",
                "200522610357213631230514655336094616639",
                "202823694100712904753840857060361505872",
                "232539664073740295521205860770043539846",
                "229247849294654740637822864819042636868",
                "284579863608561822034734233975271348658",
                "196765351879957556725085908072121917131",
                "304610827366418040603648604039727772802",
                "162889843528056224250033870649563685034",
                "338216004461903092598947168044881713063",
                "213001520091228361913014131130291571477",
                "32315408883360492128875083549593543528",
                "145275309553430424361262439838976355305",
                "210569504960276494837419725136208088404",
                "174307502841470163931952990696790832955",
                "214445348945199014867538431570466899805",
                "109010699703243864484630657741133592621",
                "4057964933576567794632598657131662060",
                "316485900459877278909920655220798506091",
                "310256233510215912915927303971322121874",
                "148265627095694383778584809409624513784",
                "292388696449717148903956424990509720229",
                "111716336207239903726976093589973137074",
                "322515878083090783230139476774339204439",
                "146327613512349280004084994546159807350"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-5d91c582",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "doSDODistance",
            "file": "modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java"
        },
        "digest": {
            "length": 616.0,
            "function_hash": "140166956115231745631658360358583786471"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-66e9f9dd",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "unwrapConnection",
            "file": "modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleDialect.java"
        },
        "digest": {
            "length": 1082.0,
            "function_hash": "207256628840053327237408572913325126961"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-69596e17",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostgisNGDataStoreFactory.java"
        },
        "digest": {
            "line_hashes": [
                "72297846146421574481496836379141415314",
                "191559276605633156134404134679846034143",
                "16942317334204852754325244857261407101",
                "273875195079675792100257593556611631599",
                "312222944726134249437984087099000950842",
                "21423474555066674649457512592904673779",
                "249144092793239838724822199864042101578"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-6fd38c83",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-oracle/src/test/java/org/geotools/data/oracle/OracleFilterToSqlTest.java"
        },
        "digest": {
            "line_hashes": [
                "214296553943220521808960117177924670506",
                "190374290175640033792646409884664618702",
                "119349991324144044727828951718233284248",
                "243485828038804406559355342681429233345",
                "214275168984843250585860006010124583372",
                "238398715341854547583619692223966622327"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-7770a86f",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "createFilterToSQL",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java"
        },
        "digest": {
            "length": 199.0,
            "function_hash": "255987811724664614532961537162091800073"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-84b04209",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "createFilterToSQL",
            "file": "modules/plugin/jdbc/jdbc-mysql/src/main/java/org/geotools/data/mysql/MySQLDialectBasic.java"
        },
        "digest": {
            "length": 72.0,
            "function_hash": "53311857982718914455302630709132681632"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-85a17533",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "initializeConnection",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java"
        },
        "digest": {
            "length": 125.0,
            "function_hash": "116649229414234232651017910025066836415"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-8e6ded47",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "testFunctionJsonArrayContainsNumber",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java"
        },
        "digest": {
            "length": 385.0,
            "function_hash": "134959298950713195793596911989783540268"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-9b034f95",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "visitFunction",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"
        },
        "digest": {
            "length": 3994.0,
            "function_hash": "144269811836907875332100735547197287993"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-aac5d82e",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "convertToSQL92",
            "file": "modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java"
        },
        "digest": {
            "length": 816.0,
            "function_hash": "39083436095240866762164342210953008350"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-b16221f6",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "jsonExists",
            "file": "modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java"
        },
        "digest": {
            "length": 528.0,
            "function_hash": "133396524232645826726273332076258483130"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-c77db7f8",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "writeLiteral",
            "file": "modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java"
        },
        "digest": {
            "length": 1154.0,
            "function_hash": "260736272320050501553402867692262760537"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-d748c55e",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "testNestedObjectJsonArrayContains",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java"
        },
        "digest": {
            "length": 424.0,
            "function_hash": "259975987087269551836184379062022956393"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-e5c6ec34",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "testLikeToSQL",
            "file": "modules/library/main/src/test/java/org/geotools/filter/FilterTest.java"
        },
        "digest": {
            "length": 1075.0,
            "function_hash": "236502600874157471185706150807419487732"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-e852eb45",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java"
        },
        "digest": {
            "line_hashes": [
                "222454627702680702682845701839126349920",
                "59027227462534466173861963123874621529",
                "52652565738458779537781330061124064994",
                "66587722525295754864709179574783836826",
                "150278209868464411204428547093910257028",
                "237291601142665080007087172337628620341",
                "21280653224431699596041115136957881514",
                "281961777336031681475238207660986987417",
                "253387214538982898391371728674188956158",
                "334889276827123027609307925964264699995",
                "272459854927083321554644654769916414804",
                "53090156315542670703890201977929262650",
                "254456658038048635928383745249987460194",
                "51272451310764072278475496806019086216",
                "59960082426216273108337376778049753614",
                "330975800771394318936122819896503674099",
                "116040847827667456699492274004839669617",
                "44545771298509130492197775852368070613",
                "53285074984208797262569096177611870168",
                "96151127212768516625060940126624168767",
                "222692814623059433698594412904365840699"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-ef4a6901",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "file": "modules/library/jdbc/src/main/java/org/geotools/jdbc/SQLDialect.java"
        },
        "digest": {
            "line_hashes": [
                "271967369994686088946604060839258486583",
                "143757807308064673322500719707567194891",
                "81421073752167631253584337735588724142",
                "96777492195815811987895310964170001917",
                "50789613121202626185240961735537968974",
                "128161857889695842374406216299345787594",
                "26722019151327519011564762977212000999",
                "233362593998452079004141544861169285506",
                "274652551076053773234829309858608238554",
                "279247886364267234292723348574914419547",
                "215370038324843817588848741358192576633",
                "161346880260006977017839165489523242600",
                "101856513671138508746978283917223732549"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2023-25158-f2969d40",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "buildJsonFromStrPointer",
            "file": "modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"
        },
        "digest": {
            "length": 617.0,
            "function_hash": "178665877321501138853807120304758727714"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-f60d88aa",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    },
    {
        "target": {
            "function": "visit",
            "file": "modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java"
        },
        "digest": {
            "length": 1249.0,
            "function_hash": "328791648793822088139607993564037432773"
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2023-25158-f7ba293c",
        "source": "https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25158.json"