CVE-2023-40572
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-40572
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-40572.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-40572
- Aliases
- Published
- 2023-08-24T01:15:33.272Z
- Modified
- 2025-12-10T10:10:02.804920Z
- Severity
-
- 9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
- Details
-
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality, integrity and availability of the whole XWiki installation. When a user with script right views this image and a log message
ERROR foo - Script executed!appears in the log, the XWiki installation is vulnerable. This has been patched in XWiki 14.10.9 and 15.4RC1 by requiring a CSRF token for the actual page creation. - Database specific
{ "cwe_ids": [ "CWE-352" ], "cna_assigner": "GitHub_M", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40572.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40572.json
- https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7
- https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-4f8m-7h83-9f6m
- https://jira.xwiki.org/browse/XWIKI-20849
- https://nvd.nist.gov/vuln/detail/CVE-2023-40572
Affected packages
Git / github.com/xwiki/xwiki-commons
Git / github.com/xwiki/xwiki-platform
Affected ranges
- Type
- GIT
- Repo
- https://github.com/xwiki/xwiki-platform
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
xwiki-application-calendar-1.*
xwiki-application-calendar-1.0
xwiki-platform-7.*
xwiki-platform-7.3-milestone-2
xwiki-platform-7.4-milestone-1
xwiki-platform-7.4-milestone-2
xwiki-platform-8.*
xwiki-platform-8.0-milestone-1
xwiki-platform-8.0-milestone-2
xwiki-platform-8.1-milestone-1
xwiki-platform-8.1-milestone-2
xwiki-platform-8.2-milestone-1
xwiki-platform-8.2-milestone-2
xwiki-platform-8.3-milestone-1
xwiki-platform-9.*
xwiki-platform-9.9-rc-2
xwiki-plugin-tag-1.*
xwiki-plugin-tag-1.1
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeFromURLTemplateProviderSpecifiedButOldPageTypeButOverriddenFromUIToNonTerminal"
},
"id": "CVE-2023-40572-02bd2399",
"signature_version": "v1",
"digest": {
"function_hash": "179975328097746454429812346771264505674",
"length": 1033.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUIDeprecated"
},
"id": "CVE-2023-40572-07b1e638",
"signature_version": "v1",
"digest": {
"function_hash": "296927274290638242840704275175753143569",
"length": 795.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedRestrictionExistsOnParentSpace"
},
"id": "CVE-2023-40572-07bb4039",
"signature_version": "v1",
"digest": {
"function_hash": "51676277138690928750579237352687105453",
"length": 1101.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeFromURLTemplateProviderSpecifiedTerminalOverriddenFromUIToNonTerminal"
},
"id": "CVE-2023-40572-17998dd7",
"signature_version": "v1",
"digest": {
"function_hash": "106432352804049588090186507785335852424",
"length": 1024.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUICheckEscaping"
},
"id": "CVE-2023-40572-1845cf39",
"signature_version": "v1",
"digest": {
"function_hash": "47191083014834138135132912420907503830",
"length": 817.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentTerminalFromUI"
},
"id": "CVE-2023-40572-1946bb12",
"signature_version": "v1",
"digest": {
"function_hash": "239357315065916517465440712672855367011",
"length": 885.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentFromURLTemplateProviderSpecifiedNonTerminalButOverriddenFromUITerminal"
},
"id": "CVE-2023-40572-195ddac3",
"signature_version": "v1",
"digest": {
"function_hash": "20770612411952119214592661595036735743",
"length": 978.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentNonTerminalFromUIDeprecatedCheckEscaping"
},
"id": "CVE-2023-40572-201f98ac",
"signature_version": "v1",
"digest": {
"function_hash": "51871045510595967058854485032952516141",
"length": 816.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeFromURLTemplateProviderSpecifiedButOldPageType"
},
"id": "CVE-2023-40572-214e817d",
"signature_version": "v1",
"digest": {
"function_hash": "14935426953506792407649934542193734775",
"length": 939.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedNonTerminal"
},
"id": "CVE-2023-40572-3194c7d7",
"signature_version": "v1",
"digest": {
"function_hash": "9516639241020006181138890757246931464",
"length": 1104.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/CreateAction.java",
"function": "getRedirectParameters"
},
"id": "CVE-2023-40572-3326b0ab",
"signature_version": "v1",
"digest": {
"function_hash": "244331988720069722323342942711984237754",
"length": 486.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedNonTerminalOverridenFromUIToTerminal"
},
"id": "CVE-2023-40572-368e7b5b",
"signature_version": "v1",
"digest": {
"function_hash": "53718083189402678149314626604178877627",
"length": 1174.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedButOldSpaceType"
},
"id": "CVE-2023-40572-3c6ee1c6",
"signature_version": "v1",
"digest": {
"function_hash": "163285609518623285487526538254902567499",
"length": 1095.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentButNonTerminalFromURL"
},
"id": "CVE-2023-40572-4a77d3b0",
"signature_version": "v1",
"digest": {
"function_hash": "264357579783833773745900124282529600370",
"length": 734.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentNonTerminalFromUIDeprecatedIgnoringPage"
},
"id": "CVE-2023-40572-50ca7543",
"signature_version": "v1",
"digest": {
"function_hash": "274672346700962634966504707720550330442",
"length": 880.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedTerminalOverridenFromUIToNonTerminal"
},
"id": "CVE-2023-40572-5cd99ef9",
"signature_version": "v1",
"digest": {
"function_hash": "198371741184238102577158833885965414482",
"length": 1185.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedTerminal"
},
"id": "CVE-2023-40572-6040ed74",
"signature_version": "v1",
"digest": {
"function_hash": "299131818318430554009711095434866396988",
"length": 1093.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "beforeEach"
},
"id": "CVE-2023-40572-715e4b2b",
"signature_version": "v1",
"digest": {
"function_hash": "14448983033146278351858664249313740004",
"length": 1305.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUI"
},
"id": "CVE-2023-40572-7186033c",
"signature_version": "v1",
"digest": {
"function_hash": "28548658512426259123768760634086150526",
"length": 811.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeFromURLTemplateProviderSpecifiedTerminal"
},
"id": "CVE-2023-40572-7b7c8ecb",
"signature_version": "v1",
"digest": {
"function_hash": "69317302272256102072657816877096466168",
"length": 932.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/CreateAction.java",
"function": "render"
},
"id": "CVE-2023-40572-80ea6b4c",
"signature_version": "v1",
"digest": {
"function_hash": "108693257015730121877155958262959589925",
"length": 1098.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentTerminalFromUICheckEscaping"
},
"id": "CVE-2023-40572-825aa10b",
"signature_version": "v1",
"digest": {
"function_hash": "88130963462250882140107702331315685807",
"length": 886.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentNonTerminalFromUIDeprecated"
},
"id": "CVE-2023-40572-8c0f3239",
"signature_version": "v1",
"digest": {
"function_hash": "102748995549759443873312829698384498321",
"length": 810.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentFromURLTemplateProviderSpecifiedNonTerminal"
},
"id": "CVE-2023-40572-aa286805",
"signature_version": "v1",
"digest": {
"function_hash": "204645184050033149653629768437368781154",
"length": 909.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUIDeprecatedCheckEscaping"
},
"id": "CVE-2023-40572-b59e6bb8",
"signature_version": "v1",
"digest": {
"function_hash": "293512919798507284602795136062962964286",
"length": 803.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeFromURL"
},
"id": "CVE-2023-40572-b711c441",
"signature_version": "v1",
"digest": {
"function_hash": "86216670726186418957906466378182042729",
"length": 666.0
}
},
{
"signature_type": "Line",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java"
},
"id": "CVE-2023-40572-c11e9e4d",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"71228894011404736317514949406789786656",
"338791068643829470582628766832181659060",
"141041644761390046727807590466980775294",
"82532775861235429458841521373161006663",
"220187139383996892014432168560811525245",
"280213902526355774871451894105084575460",
"236987269030474893123974444091516660250",
"224486519085563232580823777430997554729",
"217092164381127487088111213525659498072",
"142179571865083533398061529398965669035",
"320376026301672813712533143056522192744",
"183637386844249448240229461107482382899",
"336086849934394667832873744766765174157",
"57250467032165397614939709783990447943",
"203891459745298875726125363154586707730",
"271283833787585257962482752851215815721",
"196233388673516254909612865191782289499",
"56111240777509965795961315214113382879",
"83646907449283067955201436442975708389",
"216289463903934344473065672142457216239",
"87779932641354597839372447052962760369",
"245030732824026923517153928294609524961",
"286282070732689888362694480185973035999",
"153190675466749211448485842783218128435",
"69224264878194355445481704468221638402",
"130975838719256105114585729970688504050",
"23764874265721483272934092669819762075",
"58151052229038660107696761261978922689",
"186714329719011903076419685776516546764",
"338963115689573436175930245912890909923",
"224126129532039982591647990175010938650",
"40222222561893354993423095286882484439",
"245364871271487873653359861942999207400",
"248738559131614005743198717662477298933",
"223002991961787663458410500275710415531",
"322755497407070943716080250189469052894",
"131461890829363181747833815714552146385",
"190468830165856243951878983988273738273",
"208828242389297508378804867171578482060",
"248791065272591282457308627221375723800",
"107433698536487774111092998869407295893",
"243575793058184086985956320891284347323",
"92232463682206689840593628844638482498",
"142519366992662333241460268607951116757",
"23764874265721483272934092669819762075",
"58151052229038660107696761261978922689",
"186714329719011903076419685776516546764",
"338963115689573436175930245912890909923",
"222518486345853458329426682975298878541",
"244332756414085432832205086636088022930",
"242033675324301553503552922470363638762",
"19012969222669028521030661659351660712",
"57988337485985804942190999283326621983",
"44588370631847740295125358090776529108",
"117954011665628345467987874476725443408",
"277137154568104159444639079427492490851",
"338963115689573436175930245912890909923",
"263588951036394482278007450294288670248",
"251439104458663527175402608694047194319",
"170383429591445861076097189801547698821",
"167801534308561721266726115895192260644",
"130792404318511215443325906496748357581",
"23764874265721483272934092669819762075",
"58151052229038660107696761261978922689",
"186714329719011903076419685776516546764",
"338963115689573436175930245912890909923",
"80170265878945297196934779922238170352",
"149218348947933220712905544805650177542",
"63880423388726801106535063079618380260",
"274369280611497527640218715226927786734",
"288932821524851786601014203997325200106",
"68045170940409577957123404719988713637",
"268926598222541047524708720477277315510",
"239278401026280971066524625953907117579",
"167146798661124941404816669939499736367",
"304666035897497857843479394772769736894",
"39516516483954564488669347913899545864",
"11646910793494413317108131731873130188",
"288988062294673730337208840007979767476",
"251698024616615216773519624775769035155",
"44588370631847740295125358090776529108",
"117954011665628345467987874476725443408",
"277137154568104159444639079427492490851",
"338963115689573436175930245912890909923",
"26537281447445481565072248744481385411",
"183074765546341226732920888900442491377",
"286869434323588861555840824442202611097",
"213182183891106837232935423981374437670",
"108644483581994113670154245459788499797",
"294063284550982618956786884041787909081",
"97143276151829084812309443508614426691",
"198448548172724921189371575909397883211",
"167146798661124941404816669939499736367",
"116280414448472293945915882363900016517",
"292300488581418158106394929072207821980",
"7239790651026101210398958885855481445",
"125375408166053999302072412209895809467",
"54380410067221145930861620160190963454",
"95723983413064874922121580527317297517",
"128993643922405577929037437033628607835",
"69617727943564630755647361141979331760",
"338963115689573436175930245912890909923",
"112848200747939321173101044106288125027",
"237848957348029757746171059125701628525",
"60416532650924390371743395550832657091",
"242881592155597031631231721271886756785",
"46023569524062238847251945522067631127",
"44588370631847740295125358090776529108",
"117954011665628345467987874476725443408",
"277137154568104159444639079427492490851",
"338963115689573436175930245912890909923",
"270984686898960795541408872379382963997",
"320696473109955916151644185367667890262",
"87509125919670053755779802429962019999",
"190948753348751152012178585381820192674",
"200734958197350248484633745202360344909",
"64193492029174763258776240604700306020",
"311433299103744751263182432878823360731",
"202536736642879889599909585922178213303",
"167146798661124941404816669939499736367",
"249685424741727518339110840972056390281",
"127844497191011757002226380806715114406",
"307095667195181245065895857271997191722",
"207487078467940020358417733331943589579",
"258189987685976695185958837064550888421",
"322755497407070943716080250189469052894",
"131461890829363181747833815714552146385",
"190468830165856243951878983988273738273",
"208828242389297508378804867171578482060",
"152621968057461867956408811180018308753",
"120433661072222440372308113660573422427",
"186103975353365431357495901068195353046",
"166789234450306348125419003102739677774",
"268667042912443802685266552867355878730",
"322755497407070943716080250189469052894",
"131461890829363181747833815714552146385",
"190468830165856243951878983988273738273",
"208828242389297508378804867171578482060",
"48143489832663770088349661458061734850",
"168194842925189731660102278770273008600",
"25210959691301470331786607375808082447",
"271877659666893409772778304526993745234",
"319085951174735416005614867723484584159",
"46510043135068860854864478733663079515",
"70443274686894334742667502499788408817",
"77375968275694582832815931219090861858",
"286935945326098169752865385275398948894",
"304228100273481880756125696009905911489",
"101185857896470385703690067007212690200",
"103534027993605108054771912733927176572",
"230246265861477549886965409101808313371",
"334937696801011629421534787584447509542",
"287881845794226495036975885318533051755",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"206805199801630367206064149276781044810",
"141638362678611873434291393592188228375",
"83537180645676305821911672461845199764",
"46586529755166137106452322212278437245",
"275861130482632281935408470935966185238",
"132541778486829039582641639581460778900",
"323196760842953515922386438893128928723",
"8326549237386062817453401675101487636",
"36312046815313162741777425802395461981",
"246625776931220892041436353138713276268",
"66227194993015961512553423704875588204",
"120914352229135321475453394751023051825",
"249550176439763996430824494251271483898",
"324970036354125577173566536386439559642",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519",
"152703204986193551911111935024224400778",
"301232065673391504363063344043778757912",
"69359369504742128288571601113477262557",
"66759562117564578167591056052436157478",
"77521875265570212151610803811341586710",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"192464967355054309926910664102425543400",
"178245225999410189072621489344987446814",
"56069356487797949755393800216081715168",
"103939749025219199712966164814012933060",
"324970036354125577173566536386439559642",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"72238739044332318634237256794748945213",
"100433471531682510759940273010227708292",
"23094793646372063067096538752078749212",
"2114998998449627589680233162233975875",
"274236862170638003848866795664901306476",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519",
"131801019586192608757369254148111405445",
"123827337531851669793191936190516526590",
"164497488565818643543177724218458779460",
"87929597749746674689994227091487839351",
"320962025022580319187578613638407781187",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"268717802097382075248760028840394037327",
"57291392749737832526336708946704652069",
"110218114111843741652510632314185457675",
"48466684269647386385408991518410734367",
"178161114847055550456188128814662905656",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519",
"13389958014702686343269068650087851587",
"156729675054024660734422494007833435373",
"34642855448808825789043039200325238567",
"35154215309985161656108978858117154488",
"178161114847055550456188128814662905656",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"51899579794095048253463906801796097785",
"156126713920149938872192263174864211250",
"160934931757865942116986907600374423235",
"95261239752364957016234964792847550750",
"178161114847055550456188128814662905656",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"3120601157351187107414743848567026192",
"207320725963733134073518118715811607176",
"185821306662173952523158030213424747056",
"157110687284150738240928801217081630153",
"178161114847055550456188128814662905656",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519",
"259401396070759321760062036188962076354",
"281023996217913404281957899622369019661",
"200832467186976073946503151972013086992",
"310809239146790808439151760199117256071",
"324970036354125577173566536386439559642",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519",
"331731152446582564215578757581400229327",
"199893440649160797734223196728369414243",
"206409307699926459613955087031673249889",
"250969629977734157038319923913763300841",
"77521875265570212151610803811341586710",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"273989639087296358211107837433596507994",
"26102279256308525686383819169278861314",
"78005223808089777166656745957777091161",
"213960648671790879439779935610016304441",
"334937696801011629421534787584447509542",
"174417046639484061091067902926397177150",
"114105723831902918126219170353066779572",
"283067338302534995821730847581643806488",
"143182670164311642736368719130918197519",
"308181873239494063599150424405014757782",
"24297463792383314858050307822400519299",
"305499842927856827865822925816509242733",
"208265114052754732905956166965747302139",
"334937696801011629421534787584447509542",
"87477719120916601751682294925498465598",
"82061068559130429397500734233265505562",
"45215485274871705300816512357092487331",
"143182670164311642736368719130918197519"
]
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecified"
},
"id": "CVE-2023-40572-c539ef64",
"signature_version": "v1",
"digest": {
"function_hash": "66297425770145625583007755681597484043",
"length": 1077.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITopLevelDocument"
},
"id": "CVE-2023-40572-cfc3db96",
"signature_version": "v1",
"digest": {
"function_hash": "218563076296529569639165155888240107250",
"length": 730.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeTopLevelFromURL"
},
"id": "CVE-2023-40572-d0c4e6ba",
"signature_version": "v1",
"digest": {
"function_hash": "8207546718169358595192610568114808931",
"length": 657.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateSpecified"
},
"id": "CVE-2023-40572-d1e18775",
"signature_version": "v1",
"digest": {
"function_hash": "82722293227656481455884613789114747848",
"length": 1056.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentWebHomeButTerminalFromURL"
},
"id": "CVE-2023-40572-d33182c8",
"signature_version": "v1",
"digest": {
"function_hash": "101433556320495986558309537793739955146",
"length": 739.0
}
},
{
"signature_type": "Line",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/CreateAction.java"
},
"id": "CVE-2023-40572-e5b0b748",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"229426371671027883467415384220196658198",
"14607325868120406447303912386949377435",
"187856021108421832554765900977586832412",
"338962675361995197780562678339873189358",
"336007219815828999073606679029841457554",
"3106040369407909514325624606255454329",
"311515887803339029840033148973438694772",
"77637834314825788296341589689879808275",
"144226982935212363221028026035667132027",
"224335367831704975840475209874446403315",
"93356317142404105903285712777598941919",
"130112660747286506097062691602740994881",
"37632251809635120922621420999900177715",
"334638973208979247899861427556457665657",
"197641020089602211147139643259772162988",
"183732739490753333266148129297751891440",
"210025880765804877770828903931919691575"
]
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "newDocumentFromURL"
},
"id": "CVE-2023-40572-f52c4864",
"signature_version": "v1",
"digest": {
"function_hash": "133038228850557227218542784101314636524",
"length": 643.0
}
},
{
"signature_type": "Function",
"source": "https://github.com/xwiki/xwiki-platform/commit/4b20528808d0c311290b0d9ab2cfc44063380ef7",
"deprecated": false,
"target": {
"file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java",
"function": "existingDocumentFromUITemplateProviderSpecifiedButOldSpaceTypeButOverridenFromUIToTerminal"
},
"id": "CVE-2023-40572-f97cad67",
"signature_version": "v1",
"digest": {
"function_hash": "136019100961430585488226157177428661956",
"length": 1166.0
}
}
]