{"id":"CVE-2022-23617","summary":"Missing authorization in xwiki-platform","details":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue has been patched in XWiki 13.2CR1 and 12.10.6. Users are advised to update. There are no known workarounds for this issue.","aliases":["GHSA-gf7x-2j2x-7f73"],"modified":"2026-09-09T15:50:53.449367Z","published":"2022-02-09T21:00:14Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23617.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-862"]},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XWIKI-18430"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23617.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gf7x-2j2x-7f73"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23617"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/b35ef0edd4f2ff2c974cbeef6b80fcf9b5a44554"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"0"},{"last_affected":"45cb44af6bd0775156a54e0a7e10804eb1689f5b"},{"introduced":"271203deeb757a7c21e3c0623b79e7b3050c2a05"},{"last_affected":"1d2a35bb2773fe8b68f16a65c440beb65b3a49bf"}],"database_specific":{"cpe":["cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:13.0:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:13.1:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"0"},{"last_affected":"12.10.5"},{"introduced":"13.0"},{"last_affected":"13.0"},{"introduced":"13.1-NA"},{"last_affected":"13.1-NA"}],"source":["CPE_RANGE","CPE_STRING"]}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"0"},{"fixed":"6964f03b74ff14b15e5bf24008ed47a0f87ab408"},{"fixed":"c8ef54e5edad98883ec37bea18edb78c39215348"},{"fixed":"30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"fixed":"b35ef0edd4f2ff2c974cbeef6b80fcf9b5a44554"}],"database_specific":{"extracted_events":[{"introduced":"13.0.0"},{"fixed":"13.2-rc-1"},{"introduced":"0"},{"fixed":"12.10.6"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["13.0","13.1-NA","xwiki-commons-12.10.5","xwiki-commons-13.1","xwiki-commons-13.1-rc-1","xwiki-commons-12.10.4","xwiki-commons-12.10.3","xwiki-commons-12.10.2","xwiki-commons-12.10.1","xwiki-commons-12.10","xwiki-commons-8.3-milestone-2","xwiki-commons-8.3-milestone-1","xwiki-commons-8.2-milestone-2","xwiki-commons-8.2-milestone-1","xwiki-commons-8.1-milestone-2","xwiki-commons-8.1-milestone-1","xwiki-commons-8.0-milestone-2","xwiki-commons-8.0-milestone-1","xwiki-platform-12.10.5","xwiki-platform-12.10.4","xwiki-platform-12.10.3","xwiki-platform-12.10.2","xwiki-platform-12.10.1","xwiki-platform-12.10","xwiki-platform-9.9-rc-2","xwiki-platform-8.3-milestone-1","xwiki-platform-8.2-milestone-2","xwiki-platform-8.2-milestone-1","xwiki-platform-8.1-milestone-2","xwiki-platform-8.1-milestone-1","xwiki-platform-8.0-milestone-2","xwiki-platform-8.0-milestone-1","xwiki-platform-7.4-milestone-2","xwiki-platform-7.4-milestone-1","xwiki-platform-7.3-milestone-2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-23617.json","vanir_signatures_modified":"2026-09-09T15:50:53Z","vanir_signatures":[{"digest":{"function_hash":"105122086546058824878968121718305651787","length":1068},"id":"CVE-2022-23617-03bffba0","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecifiedTerminalOverridenFromUIToNonTerminal"},"deprecated":false},{"source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/CreateAction.java","function":"initAndSaveDocument"},"deprecated":false,"digest":{"function_hash":"283744772032747414546255201795434145351","length":713},"id":"CVE-2022-23617-200cc2e8","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["27483679761532882002897255477540558851","283066495204238362561153133964545594064","250623603085101733197059247573744416520","6066341877920958467300677702866183536"],"threshold":0.9},"id":"CVE-2022-23617-204306ff","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/AdminAction.java"},"deprecated":false},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentWebHomeFromURLTemplateProviderSpecifiedButOldPageType"},"deprecated":false,"digest":{"function_hash":"249365194847084959370694664905410966874","length":825},"id":"CVE-2022-23617-22a8e375","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"id":"CVE-2022-23617-27bf48ac","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentWebHomeFromURLTemplateProviderSpecifiedButOldPageTypeButOverriddenFromUIToNonTerminal"},"deprecated":false,"digest":{"function_hash":"124938637555392065451657790215996608228","length":915}},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecifiedNonTerminal"},"deprecated":false,"digest":{"function_hash":"28815028780478642589885865624185840875","length":987},"id":"CVE-2022-23617-30ca5e71","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"deprecated":false,"digest":{"function_hash":"146949148637180913003428140003965262178","length":1630},"id":"CVE-2022-23617-310485f8","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/InlineAction.java","function":"render"}},{"deprecated":false,"digest":{"line_hashes":["14284014391921207723655287216161814327","24470432875211820887238341578555810792","183145347525088803929429502709582147529","232814941356848113137345721236504791193","110676839413569546584603416938069766633","132586969629995843616889972007709599541","151313055453651322196833890015558647457","116852598639783573674673766938035313272","260328699737284417607618949180117818544","121858664815462226834526323171601766595","209381480174501343170920337488831239256","160173173918975405889321478030168188031","241910355647486584863546895539850887263","104659933645297693090945462609839195334","247879120770146797085114365676593877274","8319109010962697269103689981083225632","316163941950413676626135608406192277434","122851581616542823424112207544528521060","128529297843315208181127898221816758053","52693387918743146449719821799035905438","270604195917046026102148208244686510080","298680841255174195113058490757625306965","224818251538622060857471155638434660486","109067682008557344517006702545645434287","31046034650213275879522132308056083062","5227801196618554354406708233021270343","53641236285481002657948432800970074099","281885648993430876318440564660682430382","200710563333378150728308884013477624408","144419872077956954656572287667062964181","68179152056879246448709759687583601978","219420069474199504712141532423635947932","312964835155045100338779405897047298625","78691682694134749563511556485485376063","48560374980159276703545556966405664285","267425780694960462243950133394071841304","88345019623375506415998534289635787210","6733861262830422697785304979079893663","38249478733430322491483402999261533761","228198494030360199568783504029839035761","117434367515062193839063259679782131096","292310757765560346370493614581478553069","245683477204134824047313693286128572578","228411065674093340196790539289598496995","109345880151788193736158456586892397201","209251735228887997071897532271568216258","222875541840876941668808849385424644749","320181983719381035643119189946872911155","243485782661211107942656784265953428997","313947379709022793621712691199437852722","330057506872195246705051355392970168516","83995435569562716406371953863008409311","280747659952873707090227789560611216336","257111490394229039599005290807950654276","139631485574862169190677291217756562048","73632686073960429289757567616116778248","234171187720756547139397090349469306654","96330748923259906444434288278437753943","295136337170661812790358768235404575938","295790306945059057928520215111188333935","272179504691131805632647546614827000179","111584229102755170504781007602003420702","298827527006482684506357191130559600877","96000035792462174512178398998347104847","147015722239582174405708457338501627017","327014073891918902065562819562599904827","100933456786397891604834855123029224766","247971768741585527676005988799584048721","205912867488472912795936613710757847666","116967322235915004154198460708655873275","173742460328583732871701087708222966009","329988041057510137058312794935502237682","314477565729544424102704791111208299764","308526471385493154451819819614114681504","287087926513861529294657845292965154490","225708471041680006028775865326577598107","330432519241556629006677218734780112215","125111631136906815049782053213882250808","119260538498384998678071110800762796713","102819327775947868582079633112523261781","108987448996244726825593977144053241852","96749929233169625832048783810438457833","274170266936141264152730322969313155771","27937650929634241276136102086100800004","29124980382395014089401997659264225532","90985533810666627622142163827707887574","293764339658661563869771041264180537985","220792956669307397565147888553823485870","188472846568426270937913486864326683982","203236014545133866583276171673927431239","233832880302907111295078937297595756292","27937650929634241276136102086100800004","29124980382395014089401997659264225532","90985533810666627622142163827707887574","227593559686993978897138747723308617234","131353515437488208311950369659030878168","314899337742028189037902212983064090744","148776366281715593093287438682600773859","275152944267485493238898984019974117336","13517427409497760265084726076482706057","6069040637944659615011312531982216335","30855144243571908504340592290244612229","109688231459336743111632281589551308702","70020392759601919206576047852167597653","223763141797382025045178132133930517971","141970641403842190551887417172973033805","143156053634738274422795827189581842433","306543055688451346674261605385109619472","260474491360762448867634860395868359020","67606110525399416376844516638992762179","280369063991809809745662517504737795613","58534119762953843272575032509410484914","354627880802343631497676058444053123","4868887577674450048452986702886970518","232236663705168428230698707845470046523","194666268640013519115569079748710459571","272658190498668691973998979249237186419","90985533810666627622142163827707887574","310982157946660499897786810641704848151","336673727402588412855095866974919698780","275316387985319259145389826653380260957","157331325241113538649437221236119487093","35891806069688412171712883675893186432","166059683465370876750522575776629908010","240868653732698854148516075848808058595","90985533810666627622142163827707887574","148555843992440919671989645944039025722","131727206304317979593755866869857028956","335276100736657005653582221898043244525","199815619387735716289823060414504092537","35891806069688412171712883675893186432","166059683465370876750522575776629908010","240868653732698854148516075848808058595","90985533810666627622142163827707887574","106648102801968871083595384765823720358","337510605843254678530910523181605241615","159082178083204529638221859452151270859","115924764112991566107867888053774388834","122986493770452525496471300785258853738","189176924721156704826563388524208493204","271579990241477188913447142517023607116","62810550116278216028749150788574835656","236054800332741879656192989018553322194","22339533943563975173891325620975762886","66539160910454708286877606762465417900","20920617014098960008659681212410117590","26107206871681342817991960396344477598","9720379068901866036963937211257726702","317128949825213139248851200187226839820","128869975218694535385464753613651853378","8538280617146979882481225180856958112","25866370096843995826980939414235871733","58042386475117444081524009701769733598","16900045758255877296354215745270279106","232819451530053412985596918812737084673","324714899485580651960405521592285550040","285574893683770042962361729449945792755","41018833844155231232464722148975498239","87606630273466536028276717207610353946","192464531589492886242475683937027909404","239811929266479597221592853744265350420","276814575196006618119064568080506273391","179418528128301007366353076697590390120","210311216673119599454392671426427984646","279465281043232603211886241914526071156","259232701304524195929608766108313896092","27937650929634241276136102086100800004","29124980382395014089401997659264225532","310678989005803160288971992016516264500","112163291115285575745479180663754807426","122497388566488330243198465163371104014","208581441349738421143597078706737850848","150902722185506216851058930205686246902","160680080832206096735031690331543045252","237498367830148469067309675269205550264","176576163441776090681503343164811486367","110329066923894325589010415498701088539","183859676349103137166555485269182583559","188874789266232806657349539451487559613","196162372258345972323470371081564465057","92646461568071291336220461742284463656","193876306217075306504958685266804794730","260054192029474668675311184367365402294","171830866448773045104587859013488973967","133277389054045047946595147335141714996","327742669241865113181313478842678187112","219182737208383144498095079394329228047","220126394406249297824815457270596497950","48980619684128491318608992356248006684","98767204106051091890724460304438167526","276605759188598834492797997879682599121","318834803058808438978112165076310290458","5422206553834293710434286771387911029","90985533810666627622142163827707887574","160434562483265198986159053677002847912","103236077234794006560123641654373386488","79727139716231052230994156800769441456","6913373097299410520581661322279393459","276605759188598834492797997879682599121","318834803058808438978112165076310290458","5422206553834293710434286771387911029","90985533810666627622142163827707887574","153689891140680284753604178916489529879","226764827470503846937601334781165541053","124592531210684693305780500994288097095","211682545325660433126135887495459636192","276605759188598834492797997879682599121","318834803058808438978112165076310290458","5422206553834293710434286771387911029","90985533810666627622142163827707887574","19432422195646509827899539861645306126","28546802613530420594004203895001602915","144590572830915399784435508946025806509","206210805121251168070648828980940333619","101013000954942412075893155829871436526","93037678834056196080880760575844437683","229330210345886024847124335367396728086","175699439305368890120404702104005917697","60107835767234444475213816619725212793","154871292287146856584823499700553954223","14095533967784378942779945066733622794","103879907676321787343523363834391170533","248384590758199110100209127946470420240","17156699121150106931666568769676284469","210170827675293657029535712071151393211","229330210345886024847124335367396728086","274098498967522795046121718914191969952","5491079683409860142995316136100073201","205044686682377402234740355128148374738","20263723842228592137664752649626572776","230832560283688137561498076480445682804","197991156402428002060717890932742166252","300162474977285643752103503796784499168","187245293958037909530012363929320166046","140052013605423065383942399981612914883","34470553672277047323425183190077446968","196483854510099882796340980845155608366","159398865702012172867249476441615149730","197643984386528444519664929624070617068","136628845345620370409568681747803693435","290527360023624693004323780640168757047","187245293958037909530012363929320166046","140052013605423065383942399981612914883","199991508043151730087267131463027194012","16823247774389556377652795230271207964","100193052084149117851920798081321094956","27589788469297648354867804050047994343","207054002742295388642851942007866010868","27417292120756839709182512310997015471","209693640305483108011391205183031423819","275679419963318249584653329275288713168","58162119272851797600616117552413415684","93037678834056196080880760575844437683","229330210345886024847124335367396728086","175699439305368890120404702104005917697","69046148399448728585037447209509812827","24428044440686879825625506880930130310","301625176020571782054112811002020180662","158546633999929217782828112557792770518","17156699121150106931666568769676284469","210170827675293657029535712071151393211","229330210345886024847124335367396728086","274098498967522795046121718914191969952","5733357811458458774581432640776127364","322652429748970775090665572809858278389","99204589106400945342087161671037919097","295896033489446924679685589372015626665","328401045785086928909119277853599574360","300162474977285643752103503796784499168","187245293958037909530012363929320166046","140052013605423065383942399981612914883","121317362914089000620086534444789589962","296500775489145776305242467105838937650","5892068848946188545650430594098018125","130621262625332950606011363034041332523","136628845345620370409568681747803693435","290527360023624693004323780640168757047","187245293958037909530012363929320166046","140052013605423065383942399981612914883","12452034428773984938986161356039357810","139561887831016844080145372624056722587","184766658649528244069768611166303178651","317395148564637272048329186816835205331","70845134571631012448497657068265789681","9139913009006525202332580667167780482","48974169078145478334854750295197139321","15801688470545334265279671717858359264","46031344070222196823431276936638232732","221565238294287792075504085775896458391","288670666667588874666963521963938344145","15498010435123306556733020686728143083","249658703868156992295900973024097600179","30609540689279540932909576817219239812","48974169078145478334854750295197139321","15801688470545334265279671717858359264","7134606236147040465352930341287645577","158331712982870278598082466027359193724","61760684131974292524570654022585262036","158005059467539306249779556399324148647","155985699085947938656263468143396715583","147102888742158107378049639305502831624","287057661477448512087883802289435781266","336027996049609014652189408981581448858","142116904656698595572129935615735591282","25217091166432700923433677109150827820","284767194407840898636602853203450415857","35135834708880346827190369364763918803","214726113920432013651348547626767803900","102631456458377785843175561652034724576","314489261020684090933162266324392478620","287057661477448512087883802289435781266","336027996049609014652189408981581448858","42076265766069399732907862856382877381","40109742375162163395119494685314145323","138716934987740293961110212148929039446","28614447982942082234338507628458251263","178638588115907344380116665494665474008","8707198809862484897982801618688839614","335339625332965575344746974709710796464","136973837518995634278030326441319875253","116504486477851507176689367495179835674","209624755483832584893383716717936835259","69407308587978316353333708077734472336","88760869594641004554946143911052000395"],"threshold":0.9},"id":"CVE-2022-23617-4669eb81","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java"}},{"deprecated":false,"digest":{"function_hash":"142192426967564978675872940226640136158","length":1200},"id":"CVE-2022-23617-58240ec1","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"setUp"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/EditAction.java"},"deprecated":false,"digest":{"line_hashes":["235750758212588119334607533569160426162","278263603820274933523057235129977783542","160527432430222949564190959351650441696","82544904030563574156407666076603523201"],"threshold":0.9},"id":"CVE-2022-23617-64426310","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"digest":{"function_hash":"270501476488745025764966583407356617375","length":2266},"id":"CVE-2022-23617-73175d3b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/AdminAction.java","function":"render"},"deprecated":false},{"id":"CVE-2022-23617-75aa92d6","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/SaveAction.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["48089983431346841269169839256190322989","275050576352882815860922129217084265179","216059409668512762318162325064156126467","178605525371757308073707825577159290747","108861701845933614174171990411308509753","133427059327127742113795341256571481119","98443689117052865205844069365246043569","163367880393171580351260219868999511868","280969524148203786377159483358857980626","179728559659247981288349383303480352152","122343609870036513482039499703228711301","293749351494434965557537288137680180985","133440199882234275417485203605245872942","268336572086384687268543114590151232880"]}},{"deprecated":false,"digest":{"function_hash":"126521643123810735510138438894898796578","length":423},"id":"CVE-2022-23617-77f9db09","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/EditAction.java","function":"prepareEditedDocument"}},{"deprecated":false,"digest":{"function_hash":"46589034809232341282168381419859419366","length":2058},"id":"CVE-2022-23617-7c24d414","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/SaveActionTest.java","function":"validSaveRequestImageUploadAndConflictCheck"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/SaveActionTest.java"},"deprecated":false,"digest":{"line_hashes":["318269586403394612164636525804306870136","258845977975089862985723949454009140261","138780193216321100632544790553173045905","294712050561578445745050682653538898323","71380716538457707854310106644389584287","187689231263123088694518469004616898628","36411241749416518506959493472921896984","147618362761641421072787600985790741004","268369875328240441930458596529676956668","124014356931283228653508652832019341374","92495916042886087697449169965067390163","166504275643095758011585310468151953073","52389570654446759669295389858274407983","318829735912915115133499118293717579901","328987370658507825348925660056317025581","153120361973529691970376398240233974972","138730200662838411530440957584704375326","191861419914291137626840523576259353199","130486459542494520668042388203185395311","113447905573739600709754727511301476771","333759184311390543889889636870265468580","320930068596129254785956406419983452207","134485768563348329384184016947450353659","280881846583987078972084135424987320086","327568066798942317359155122414698671704","250572921400613836003944148165733488847","97857413049823391872213044193014571542","102478775510950940946093265972373254167","299169894965436772848868222962611206372","330476831166068520456441312477509561462","313353419352249720252611993548737040356","75655555500649530333949028646492531822","179481509698277299913289411583790460878","102661407334691262424377674452858595129","312679432423777037977454568128983345822","37369717379132466594084976639878031185","242201112064195005900826827159222157400","51951891933123070768307565077985751180","327832325731675110717188543617174648846","220779273411514524508475848764041569144","313947379709022793621712691199437852722","317259146686019121660392830460912782003","333302463132127543478905815669711365335","196909967721427868241840559951090815122","43994104017096605509662149619803980141","282623709787236248115546204326982853621","283279004612225366784002939660528540354","40126199572415224632704277326833196055","53562098061673701994078242972386518305","133446302961144240887198144251136637011","233621489360721416033909327613502465993","128553856208792665112087579878517130593","67697885255000559739450722797034420130","214046794699947984491758679669335468800","173765849846307160158781263840275003333","56500455513705715078720960152252513639","42572828968957049330517262459994564283","10404381692444194588066658836010009065","94726331759253952447424344714877583032","82102400677978621383549053914285781675","286028556722324309642057456876284948774","225635993973739961698941944572871670305","228283437947738969989317027409588604370","277090297611786688517179081537643019681","133125180831671895970912557888532522798","229327415928991496724457149296186339089","85335435883827937812696902593505626959","156740177081756113512712651049875124301","291680266098160113931903075495840275079","10404381692444194588066658836010009065","94726331759253952447424344714877583032","82102400677978621383549053914285781675","50465177268446485515671647470800016854","330653412399770676079554092835069995676","316287141050373026847366367165466048379","276677940392479962267262777027596766657"],"threshold":0.9},"id":"CVE-2022-23617-8502a2fb","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"306871220846189303698039961013861812505","length":894},"id":"CVE-2022-23617-8899f477","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderExistingButNoneSelected"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecified"},"deprecated":false,"digest":{"function_hash":"70824240829114875469663684235593906977","length":961},"id":"CVE-2022-23617-945ad751","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/SaveActionTest.java","function":"setup"},"deprecated":false,"digest":{"function_hash":"258968509231604170176478952721916439448","length":748},"id":"CVE-2022-23617-99ec1507","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"deprecated":false,"digest":{"function_hash":"42022796359527032222793421160702983042","length":1817},"id":"CVE-2022-23617-a11b019e","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentWebHomeFromURLTemplateProviderSpecifiedWithSaveAndEdit"}},{"deprecated":false,"digest":{"function_hash":"146331518730117168765666117401447403680","length":978},"id":"CVE-2022-23617-a5dc68be","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecifiedButOldSpaceType"}},{"deprecated":false,"digest":{"function_hash":"244507440912294565690642153283453018457","length":787},"id":"CVE-2022-23617-b42a646d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/SaveAction.java","function":"startCreateJob"}},{"deprecated":false,"digest":{"function_hash":"243734514507593205763211263424352830266","length":906},"id":"CVE-2022-23617-c1f0eee8","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentWebHomeFromURLTemplateProviderSpecifiedTerminalOverriddenFromUIToNonTerminal"}},{"id":"CVE-2022-23617-c9d8818d","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/CreateAction.java"},"deprecated":false,"digest":{"line_hashes":["113435052576650134226831308583356084199","213125190090663417950813060939963117968","168869194470145156266154210712719794841","189258992030743735275319288973986076127","108432095742263989491512872300117375962","211960851975730272818557530970851307321","215833694787910076902742528180446902310","301540970427008015897231765820803802588","214288578594814167974251920577864881856","77893442621929876099549248769806756384","157217932037106413893459985912955851318"],"threshold":0.9}},{"id":"CVE-2022-23617-d08c2d33","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentFromURLTemplateProviderSpecifiedNonTerminalButOverriddenFromUITerminal"},"deprecated":false,"digest":{"function_hash":"139960028513891095979442783996573546101","length":862}},{"deprecated":false,"digest":{"length":978,"function_hash":"252065097747313514934815862950040410785"},"id":"CVE-2022-23617-d2d012e1","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"function":"existingDocumentFromUITemplateProviderSpecifiedTerminal","file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java"}},{"deprecated":false,"digest":{"function_hash":"110195918895887372338902101713928883138","length":3877},"id":"CVE-2022-23617-e2dc7b62","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"function":"save","file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/SaveAction.java"}},{"digest":{"function_hash":"32660972731959105454050822251371347901","length":1058},"id":"CVE-2022-23617-e3112e06","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecifiedNonTerminalOverridenFromUIToTerminal"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"42043985130028612773937877061953767082","length":791},"id":"CVE-2022-23617-e6cef1b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentFromURLTemplateProviderSpecifiedNonTerminal"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/XWikiAction.java"},"deprecated":false,"digest":{"line_hashes":["136327736113926633449802695697994694935","164337566545166300901824669745899157238","2913362055785176401188948235008346049","9037014943549796135997511385213095833","230257459069046672821212339713682852360","18616412537572008417983613883404856345","110425521668705184114498426411020753235","321774363759755416039826966614269759956","131455609047290109287418419082431028641","238919152853954153510426207341705210333","315672429421383434607975787861053165567","92440136191194574159465711102784988421","68811851671933172572953493012064955202"],"threshold":0.9},"id":"CVE-2022-23617-e7406dc1","signature_type":"Line"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"existingDocumentFromUITemplateProviderSpecifiedButOldSpaceTypeButOverridenFromUIToTerminal"},"deprecated":false,"digest":{"function_hash":"68769289312556821011157480218282877310","length":1049},"id":"CVE-2022-23617-e996cd05","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/CreateActionTest.java","function":"newDocumentWebHomeFromURLTemplateProviderSpecifiedTerminal"},"deprecated":false,"digest":{"function_hash":"259240541846404740730958716081389494311","length":816},"id":"CVE-2022-23617-ef8fbe0d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5"},{"digest":{"length":996,"function_hash":"248155118890096609429798995015490622331"},"id":"CVE-2022-23617-fc9d310d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/web/SaveActionTest.java","function":"validSave"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/30c52b01559b8ef5ed1035dac7c34aaf805764d5","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/web/InlineAction.java"},"deprecated":false,"digest":{"line_hashes":["315008411920865317144055842684666136308","7301872397557020084885451141933535441","112754037613520019509255009376064649114","89486027890296623573943053024939530408","179183439124891355930675674436306748008","282265773280811679802090496188555884483","323418173958649729795066022495981404063","168162511171543397528603895069788288467"],"threshold":0.9},"id":"CVE-2022-23617-ff9761b8"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}