CVE-2024-31981

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2024-31981

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31981.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-31981

Aliases

GHSA-vxwr-wpjv-qjq7

Published

2024-04-10T19:22:57Z

Modified

2025-11-06T01:20:53.954043Z

Severity

9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

XWiki Platform: Privilege escalation (PR) from user registration through PDFClass

Details

XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is possible via PDF export templates. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10-rc-1. If PDF templates are not typically used on the instance, an administrator can create the document XWiki.PDFClass and block its edition, after making sure that it does not contain a style attribute. Otherwise, there are no known workarounds aside from upgrading.

Database specific

{
    "cwe_ids": [
        "CWE-862"
    ]
}

References

Affected packages

Git / github.com/xwiki/xwiki-commons

Affected ranges

Type: GIT
Repo: https://github.com/xwiki/xwiki-commons
Events: Introduced

722146367f589d701b0c0e26d9df6cf0ac07b55a

Fixed

4810ba1812450ef533c882c5abff598676b1be18

Git / github.com/xwiki/xwiki-platform

Affected ranges

Type: GIT
Repo: https://github.com/xwiki/xwiki-platform
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

480186f9d2fca880513da8bc5a609674d106cbd3

Fixed

a4ad14d9c1605a5ab957237e505ebbb29f5b9d73

Fixed

d28e21a670c69880b951e415dd2ddd69d273eae9

Affected versions

xwiki-application-calendar-1.*

xwiki-application-calendar-1.0

xwiki-platform-7.*

xwiki-platform-7.3-milestone-2

xwiki-platform-7.4-milestone-1

xwiki-platform-7.4-milestone-2

xwiki-platform-8.*

xwiki-platform-8.0-milestone-1

xwiki-platform-8.0-milestone-2

xwiki-platform-8.1-milestone-1

xwiki-platform-8.1-milestone-2

xwiki-platform-8.2-milestone-1

xwiki-platform-8.2-milestone-2

xwiki-platform-8.3-milestone-1

xwiki-platform-9.*

xwiki-platform-9.9-rc-2

xwiki-plugin-tag-1.*

xwiki-plugin-tag-1.1

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSSWhenExistingStyleDefinedUsingShorthandNotation",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "39258519081739396248048319522055033573",
            "length": 2728.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-0fdfdb91",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "convertToStrictXHtml",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "41703459756303602656522785024875016391",
            "length": 475.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-19bcd2bc",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "convertToStrictXHtml",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "41703459756303602656522785024875016391",
            "length": 475.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-1f70a3fd",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "getPDFTemplateProperty",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177148869857451022214652396380344651544",
            "length": 1048.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-27b92494",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSSWhenExistingStyleDefinedUsingShorthandNotation",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "39258519081739396248048319522055033573",
            "length": 2728.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-399733a0",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSS",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "205800397832702398839903409506395586435",
            "length": 1197.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-44db1b4f",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "297910231308411585522318552937121803584",
                "123686931569608343004845317044397790834",
                "299876310918596646571044836739436978606",
                "87377755032522861106717120420482666488",
                "246056105141859092301277182219826828227",
                "242827100927113915810995946287179699826",
                "56976229914716193537798674956910859315",
                "69623826686599182113689577754842121553",
                "157349353695492716951431012150862296950",
                "204289282102182074566844251933000343015",
                "293280869484058200992796782355856837264",
                "139492993842826978694756427146997159693",
                "129215223029730488488916422960621850055",
                "265040495165602348073258554735128110808",
                "204754119378577647375076205589723666792",
                "123349505874913035182191895021509004860",
                "284710542290964436937955813563676573026",
                "272021325714976980028446960082267883107",
                "269420992913327537658960344288292005679",
                "59303818158546885007074175770590979501",
                "80712588104888283181930067699385147899",
                "262355431128926193200132911819071129710",
                "82948000697534531630035448950707321302",
                "154616147337310145229929869891551660546",
                "36217403140902486375485059626672181305",
                "282418774148072766794826250908968976371",
                "287997217661933356296393530057418548773",
                "88169740261661082440070086813370977684",
                "273817208824751672231106101176677912995",
                "95816496806954490160028317124427601170",
                "72726379477665200451437490579371794088",
                "245969994292992556064371068706366604701",
                "338220263415733700178095644696437237181",
                "87722940004281089039711765248819731950",
                "173458769242826183307374103662922830188",
                "138227350429573914152027564102734621875",
                "60154878417880309395557686223420587504",
                "269465645328061055073749634915907372951",
                "130395330691738795612979794618643148141",
                "11652451511063461110772798837084339309",
                "98258763075558696121475407121449173978",
                "17131911907199775368719168731710245843",
                "313497039265267887003658335267855961949",
                "306446762743497115061746243076178371971",
                "64579314163914127745991024001698025085",
                "257626561214371232755128016383395050243",
                "21326156200609958175244324460030105986",
                "34076979390226702865530159566756836112",
                "315054396262770642178520173938590230240",
                "135982543847537825818266253440190483369",
                "274605184968798560931339068749396999827",
                "55864105374058543237051091295854487984",
                "178117558519489445597620347675828638316",
                "129578681596213839726512138752193260042",
                "93463057179839376014438057154860530636",
                "176437063742992558072333857434215911174",
                "288454429415839646768730283304568646346",
                "136804928900336950587916637769133385449",
                "37519442031256812383337164439218994203",
                "41685285043491459415741944889597456339",
                "183282389048180052460675809519588277561",
                "277965171614028402289258723404044233380",
                "280513577697226990113883644392628893603",
                "202383496106143073505066758792949540716",
                "337721316323583314056041988413851332064"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-459f0ce5",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "297910231308411585522318552937121803584",
                "123686931569608343004845317044397790834",
                "299876310918596646571044836739436978606",
                "87377755032522861106717120420482666488",
                "246056105141859092301277182219826828227",
                "242827100927113915810995946287179699826",
                "56976229914716193537798674956910859315",
                "69623826686599182113689577754842121553",
                "157349353695492716951431012150862296950",
                "204289282102182074566844251933000343015",
                "293280869484058200992796782355856837264",
                "139492993842826978694756427146997159693",
                "129215223029730488488916422960621850055",
                "265040495165602348073258554735128110808",
                "204754119378577647375076205589723666792",
                "123349505874913035182191895021509004860",
                "284710542290964436937955813563676573026",
                "272021325714976980028446960082267883107",
                "269420992913327537658960344288292005679",
                "59303818158546885007074175770590979501",
                "80712588104888283181930067699385147899",
                "262355431128926193200132911819071129710",
                "82948000697534531630035448950707321302",
                "154616147337310145229929869891551660546",
                "36217403140902486375485059626672181305",
                "282418774148072766794826250908968976371",
                "287997217661933356296393530057418548773",
                "88169740261661082440070086813370977684",
                "273817208824751672231106101176677912995",
                "95816496806954490160028317124427601170",
                "72726379477665200451437490579371794088",
                "245969994292992556064371068706366604701",
                "338220263415733700178095644696437237181",
                "87722940004281089039711765248819731950",
                "173458769242826183307374103662922830188",
                "138227350429573914152027564102734621875",
                "60154878417880309395557686223420587504",
                "269465645328061055073749634915907372951",
                "130395330691738795612979794618643148141",
                "11652451511063461110772798837084339309",
                "98258763075558696121475407121449173978",
                "17131911907199775368719168731710245843",
                "313497039265267887003658335267855961949",
                "306446762743497115061746243076178371971",
                "64579314163914127745991024001698025085",
                "257626561214371232755128016383395050243",
                "21326156200609958175244324460030105986",
                "34076979390226702865530159566756836112",
                "315054396262770642178520173938590230240",
                "135982543847537825818266253440190483369",
                "274605184968798560931339068749396999827",
                "55864105374058543237051091295854487984",
                "178117558519489445597620347675828638316",
                "129578681596213839726512138752193260042",
                "93463057179839376014438057154860530636",
                "176437063742992558072333857434215911174",
                "288454429415839646768730283304568646346",
                "136804928900336950587916637769133385449",
                "37519442031256812383337164439218994203",
                "41685285043491459415741944889597456339",
                "183282389048180052460675809519588277561",
                "277965171614028402289258723404044233380",
                "280513577697226990113883644392628893603",
                "202383496106143073505066758792949540716",
                "337721316323583314056041988413851332064"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-45be0f35",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "renderXSLFO",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177591156390817839704444691935254914055",
            "length": 465.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-50544313",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "10509348528298869625935822647600889720",
                "89449116829644455567732850613623003024",
                "34512727029790683694432774419408905664",
                "101086479171495275558525826668753339982",
                "121071341332988723963948067568903408968",
                "276557802328562895430476700579492396530",
                "276081929052408674741787866189817825131",
                "290040289079087560182712151030179501900",
                "144961089154650466220391969644997958258",
                "251381921226099743438789863978571089584",
                "72700462139921336942264343836524458701",
                "323754778321723177491671865475785703610",
                "97214466430139861201614344250804579690",
                "314029889304639225627667363501436021495",
                "24122698124491548302056813441058103303",
                "217686555852293414035698000967692344951",
                "89453818306897104892756371928980694252",
                "145383404622960016543571010554842855119",
                "274028202076065213808455238795674141669",
                "327235049677244780419943594458947801665",
                "218022846306871607468917824443486353421",
                "270239652359824220555832487165001920122",
                "302683090179299608980688589639761822152",
                "185541639468881568606894274959208443860",
                "120135842387424425282075030637841711041",
                "147527045036102780237884530485808640594",
                "57433219418412966194309501305167535851",
                "235140616833794395356959116041765504466",
                "258408662911685076312437097272622263031",
                "43823855765553242443002484462964737330",
                "145705466991588922775616880236041641863",
                "253384436840545937265699284960312081413",
                "334951723073567861563589582863344920112",
                "73341681587324854660107701722572845107",
                "294039701918582965403434757514403859517",
                "292940732203954043507274608716905120558",
                "272845225026625789194138818242840793716",
                "278578452630260763731403312726382139111",
                "138554638364032354066675465437027787645",
                "258219359806401447511639531895912869717",
                "298015165572923592735222106016967340960",
                "214556194053710499403946249114340513057",
                "151579109189184561761291227021909685677",
                "163705505405816821702513961072256701026",
                "123894786232086454580205062416832975335",
                "153943152347686881650796818323002244675",
                "176041597447011213905846568434353885593",
                "192140250440734827730522807768275624090",
                "209622181404909052778503125009952472768",
                "26917302827441359796968873387668774181",
                "303371249194441847995883568917014149221",
                "205314327064555302956161405005276154933",
                "103375842999584052226589982748145701201",
                "274034072129281086153416572522298828017",
                "11092917724814294085471744071433415307",
                "262886187737575794891282823160749115877",
                "52955313943872216222698014663747991676",
                "221154176673031174601658998538796441752",
                "233730379289940626375101294971820017587",
                "5588438199596187622895187548888396699",
                "316625924918751687177191689765788000611",
                "272774324789815540610589410671347835704",
                "174674226873391824302906698082722536858"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-52ec9bf0",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "renderXSLFO",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177591156390817839704444691935254914055",
            "length": 465.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-586e7b9f",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "convertToStrictXHtml",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "41703459756303602656522785024875016391",
            "length": 475.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-5d23596c",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "10509348528298869625935822647600889720",
                "89449116829644455567732850613623003024",
                "34512727029790683694432774419408905664",
                "101086479171495275558525826668753339982",
                "121071341332988723963948067568903408968",
                "276557802328562895430476700579492396530",
                "276081929052408674741787866189817825131",
                "290040289079087560182712151030179501900",
                "144961089154650466220391969644997958258",
                "251381921226099743438789863978571089584",
                "72700462139921336942264343836524458701",
                "323754778321723177491671865475785703610",
                "97214466430139861201614344250804579690",
                "314029889304639225627667363501436021495",
                "24122698124491548302056813441058103303",
                "217686555852293414035698000967692344951",
                "89453818306897104892756371928980694252",
                "145383404622960016543571010554842855119",
                "274028202076065213808455238795674141669",
                "327235049677244780419943594458947801665",
                "218022846306871607468917824443486353421",
                "270239652359824220555832487165001920122",
                "302683090179299608980688589639761822152",
                "185541639468881568606894274959208443860",
                "120135842387424425282075030637841711041",
                "147527045036102780237884530485808640594",
                "57433219418412966194309501305167535851",
                "235140616833794395356959116041765504466",
                "258408662911685076312437097272622263031",
                "43823855765553242443002484462964737330",
                "145705466991588922775616880236041641863",
                "253384436840545937265699284960312081413",
                "334951723073567861563589582863344920112",
                "73341681587324854660107701722572845107",
                "294039701918582965403434757514403859517",
                "292940732203954043507274608716905120558",
                "272845225026625789194138818242840793716",
                "278578452630260763731403312726382139111",
                "138554638364032354066675465437027787645",
                "258219359806401447511639531895912869717",
                "298015165572923592735222106016967340960",
                "214556194053710499403946249114340513057",
                "151579109189184561761291227021909685677",
                "163705505405816821702513961072256701026",
                "123894786232086454580205062416832975335",
                "153943152347686881650796818323002244675",
                "176041597447011213905846568434353885593",
                "192140250440734827730522807768275624090",
                "209622181404909052778503125009952472768",
                "26917302827441359796968873387668774181",
                "303371249194441847995883568917014149221",
                "205314327064555302956161405005276154933",
                "103375842999584052226589982748145701201",
                "274034072129281086153416572522298828017",
                "11092917724814294085471744071433415307",
                "262886187737575794891282823160749115877",
                "52955313943872216222698014663747991676",
                "221154176673031174601658998538796441752",
                "233730379289940626375101294971820017587",
                "5588438199596187622895187548888396699",
                "316625924918751687177191689765788000611",
                "272774324789815540610589410671347835704",
                "174674226873391824302906698082722536858"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-66ac1ab4",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "getPDFTemplateProperty",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177148869857451022214652396380344651544",
            "length": 1048.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-80a2b163",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSS",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "205800397832702398839903409506395586435",
            "length": 1197.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-b2ed59db",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "10509348528298869625935822647600889720",
                "89449116829644455567732850613623003024",
                "34512727029790683694432774419408905664",
                "101086479171495275558525826668753339982",
                "121071341332988723963948067568903408968",
                "276557802328562895430476700579492396530",
                "276081929052408674741787866189817825131",
                "290040289079087560182712151030179501900",
                "144961089154650466220391969644997958258",
                "251381921226099743438789863978571089584",
                "72700462139921336942264343836524458701",
                "323754778321723177491671865475785703610",
                "97214466430139861201614344250804579690",
                "314029889304639225627667363501436021495",
                "24122698124491548302056813441058103303",
                "217686555852293414035698000967692344951",
                "89453818306897104892756371928980694252",
                "145383404622960016543571010554842855119",
                "274028202076065213808455238795674141669",
                "327235049677244780419943594458947801665",
                "218022846306871607468917824443486353421",
                "270239652359824220555832487165001920122",
                "302683090179299608980688589639761822152",
                "185541639468881568606894274959208443860",
                "120135842387424425282075030637841711041",
                "147527045036102780237884530485808640594",
                "57433219418412966194309501305167535851",
                "235140616833794395356959116041765504466",
                "258408662911685076312437097272622263031",
                "43823855765553242443002484462964737330",
                "145705466991588922775616880236041641863",
                "253384436840545937265699284960312081413",
                "334951723073567861563589582863344920112",
                "73341681587324854660107701722572845107",
                "294039701918582965403434757514403859517",
                "292940732203954043507274608716905120558",
                "272845225026625789194138818242840793716",
                "278578452630260763731403312726382139111",
                "138554638364032354066675465437027787645",
                "258219359806401447511639531895912869717",
                "298015165572923592735222106016967340960",
                "214556194053710499403946249114340513057",
                "151579109189184561761291227021909685677",
                "163705505405816821702513961072256701026",
                "123894786232086454580205062416832975335",
                "153943152347686881650796818323002244675",
                "176041597447011213905846568434353885593",
                "192140250440734827730522807768275624090",
                "209622181404909052778503125009952472768",
                "26917302827441359796968873387668774181",
                "303371249194441847995883568917014149221",
                "205314327064555302956161405005276154933",
                "103375842999584052226589982748145701201",
                "274034072129281086153416572522298828017",
                "11092917724814294085471744071433415307",
                "262886187737575794891282823160749115877",
                "52955313943872216222698014663747991676",
                "221154176673031174601658998538796441752",
                "233730379289940626375101294971820017587",
                "5588438199596187622895187548888396699",
                "316625924918751687177191689765788000611",
                "272774324789815540610589410671347835704",
                "174674226873391824302906698082722536858"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-c636f6d6",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "renderXSLFO",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177591156390817839704444691935254914055",
            "length": 465.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-c6fcaf7e",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSS",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "205800397832702398839903409506395586435",
            "length": 1197.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-cde246e4",
        "source": "https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "applyCSSWhenExistingStyleDefinedUsingShorthandNotation",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "39258519081739396248048319522055033573",
            "length": 2728.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-ea73a14f",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    },
    {
        "signature_version": "v1",
        "target": {
            "function": "getPDFTemplateProperty",
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Function",
        "digest": {
            "function_hash": "177148869857451022214652396380344651544",
            "length": 1048.0
        },
        "deprecated": false,
        "id": "CVE-2024-31981-f9127fdc",
        "source": "https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"
    },
    {
        "signature_version": "v1",
        "target": {
            "file": "xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"
        },
        "signature_type": "Line",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "297910231308411585522318552937121803584",
                "123686931569608343004845317044397790834",
                "299876310918596646571044836739436978606",
                "87377755032522861106717120420482666488",
                "246056105141859092301277182219826828227",
                "242827100927113915810995946287179699826",
                "56976229914716193537798674956910859315",
                "69623826686599182113689577754842121553",
                "157349353695492716951431012150862296950",
                "204289282102182074566844251933000343015",
                "293280869484058200992796782355856837264",
                "139492993842826978694756427146997159693",
                "129215223029730488488916422960621850055",
                "265040495165602348073258554735128110808",
                "204754119378577647375076205589723666792",
                "123349505874913035182191895021509004860",
                "284710542290964436937955813563676573026",
                "272021325714976980028446960082267883107",
                "269420992913327537658960344288292005679",
                "59303818158546885007074175770590979501",
                "80712588104888283181930067699385147899",
                "262355431128926193200132911819071129710",
                "82948000697534531630035448950707321302",
                "154616147337310145229929869891551660546",
                "36217403140902486375485059626672181305",
                "282418774148072766794826250908968976371",
                "287997217661933356296393530057418548773",
                "88169740261661082440070086813370977684",
                "273817208824751672231106101176677912995",
                "95816496806954490160028317124427601170",
                "72726379477665200451437490579371794088",
                "245969994292992556064371068706366604701",
                "338220263415733700178095644696437237181",
                "87722940004281089039711765248819731950",
                "173458769242826183307374103662922830188",
                "138227350429573914152027564102734621875",
                "60154878417880309395557686223420587504",
                "269465645328061055073749634915907372951",
                "130395330691738795612979794618643148141",
                "11652451511063461110772798837084339309",
                "98258763075558696121475407121449173978",
                "17131911907199775368719168731710245843",
                "313497039265267887003658335267855961949",
                "306446762743497115061746243076178371971",
                "64579314163914127745991024001698025085",
                "257626561214371232755128016383395050243",
                "21326156200609958175244324460030105986",
                "34076979390226702865530159566756836112",
                "315054396262770642178520173938590230240",
                "135982543847537825818266253440190483369",
                "274605184968798560931339068749396999827",
                "55864105374058543237051091295854487984",
                "178117558519489445597620347675828638316",
                "129578681596213839726512138752193260042",
                "93463057179839376014438057154860530636",
                "176437063742992558072333857434215911174",
                "288454429415839646768730283304568646346",
                "136804928900336950587916637769133385449",
                "37519442031256812383337164439218994203",
                "41685285043491459415741944889597456339",
                "183282389048180052460675809519588277561",
                "277965171614028402289258723404044233380",
                "280513577697226990113883644392628893603",
                "202383496106143073505066758792949540716",
                "337721316323583314056041988413851332064"
            ]
        },
        "deprecated": false,
        "id": "CVE-2024-31981-f95b5693",
        "source": "https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"
    }
]