{"id":"CVE-2022-23619","summary":"Information exposure in xwiki-platform","details":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the \"Forgot your password\" form, even if the wiki is closed to guest users. This problem has been patched on XWiki 12.10.9, 13.4.1 and 13.6RC1. Users are advised yo update. There are no known workarounds for this issue.","aliases":["GHSA-35fg-hjcr-j65f"],"modified":"2026-08-12T13:00:02.655839Z","published":"2022-02-09T21:10:11Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-200"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23619.json","unresolved_ranges":[{"extracted_events":[{"introduced":"13.6.0"},{"fixed":"13.6RC1"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XWIKI-18787"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23619.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-35fg-hjcr-j65f"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23619"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"0"},{"fixed":"498d9c5b0098754a675e402e51361367db4c7c9c"},{"introduced":"271203deeb757a7c21e3c0623b79e7b3050c2a05"},{"last_affected":"427c24372a3f8de165dedf1c257e8e3829e080c7"},{"introduced":"2431d7a2f8f4f512e115ccfbaf870b4893b8de8c"},{"last_affected":"2e7f489b876b0e477c23d35c30e0b6a317230019"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"12.10.9"},{"introduced":"13.0"},{"last_affected":"13.4"},{"introduced":"13.4.2"},{"last_affected":"13.6"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"0"},{"fixed":"212f09c83623bb170b0ab897c976d39f8abb0e31"},{"introduced":"909c4bf9b308cf9cab52bfed54adccd04bad5803"},{"last_affected":"e96ff4c0aa5072590b0a876a7de5003e6a891e47"},{"introduced":"2ab93e78229d61e5c0c7eeac0d6ec3194801b409"},{"fixed":"d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"12.10.9"},{"introduced":"13.0"},{"last_affected":"13.4"},{"introduced":"13.4.2"},{"last_affected":"13.6"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["xwiki-commons-13.6","xwiki-commons-13.6-rc-1","xwiki-commons-12.10.8","xwiki-commons-13.4","xwiki-commons-13.4-rc-1","xwiki-commons-12.10.7","xwiki-commons-12.10.6","xwiki-commons-12.10.5","xwiki-commons-12.10.4","xwiki-commons-12.10.3","xwiki-commons-12.10.2","xwiki-commons-12.10.1","xwiki-commons-12.10","xwiki-commons-8.3-milestone-2","xwiki-commons-8.3-milestone-1","xwiki-commons-8.2-milestone-2","xwiki-commons-8.2-milestone-1","xwiki-commons-8.1-milestone-2","xwiki-commons-8.1-milestone-1","xwiki-commons-8.0-milestone-2","xwiki-commons-8.0-milestone-1","xwiki-platform-12.10.8","xwiki-platform-13.4","xwiki-platform-13.4-rc-1","xwiki-platform-12.10.7","xwiki-platform-12.10.6","xwiki-platform-12.10.5","xwiki-platform-12.10.4","xwiki-platform-12.10.3","xwiki-platform-12.10.2","xwiki-platform-12.10.1","xwiki-platform-12.10","xwiki-platform-9.9-rc-2","xwiki-platform-8.3-milestone-1","xwiki-platform-8.2-milestone-2","xwiki-platform-8.2-milestone-1","xwiki-platform-8.1-milestone-2","xwiki-platform-8.1-milestone-1","xwiki-platform-8.0-milestone-2","xwiki-platform-8.0-milestone-1","xwiki-platform-7.4-milestone-2","xwiki-platform-7.4-milestone-1","xwiki-platform-7.3-milestone-2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23619.json","vanir_signatures_modified":"2026-08-12T13:00:02Z","vanir_signatures":[{"id":"CVE-2022-23619-18fcc7cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"requestResetPassword"},"deprecated":false,"digest":{"function_hash":"254593883270974829442839810030857090923","length":1049}},{"deprecated":false,"digest":{"function_hash":"143422469533253607580464145020614235144","length":1251},"id":"CVE-2022-23619-330ce1af","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java","function":"sendResetPasswordEmailRequest"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java","function":"checkVerificationCode"},"deprecated":false,"digest":{"length":1464,"function_hash":"139238221550136403968328508203034944186"},"id":"CVE-2022-23619-364a91d4","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java"},"deprecated":false,"digest":{"line_hashes":["138410723555555701875582937744413504698","163947184865210060278882038117424122242","245665333961712026404052289761534887653","236273279287203355890769864569226908666","260820823747241568294987026593563848662","337008760381718170696707038702385864632","237518644168457345812001977199488942441","327219129166130841388610334028318773976","135485488073685204359210595218108996774","132425208902712487467517034887888982530","237499239517633260843716418532684854797","114981088572629802805687594494846500244","282584111078032757875680774540138078642","324218579390991653706748899867715320207","315423092466324167462852888127636140555","30584587213142902972153208626010345669","260820823747241568294987026593563848662"],"threshold":0.9},"id":"CVE-2022-23619-39ff3c17","signature_type":"Line"},{"id":"CVE-2022-23619-46c9c443","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java","function":"requestResetPassword"},"deprecated":false,"digest":{"function_hash":"55374407950235074585666794219088215310","length":517}},{"source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"function":"requestResetPasswordNoEmail","file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"},"deprecated":false,"digest":{"length":441,"function_hash":"239007912057923947210149776444460196784"},"id":"CVE-2022-23619-563e22cc","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"292071381692347823653379257392887035043","length":526},"id":"CVE-2022-23619-5c3fce83","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"requestResetPasswordUnexistingUser"}},{"digest":{"length":378,"function_hash":"14915910115023918644178196296490555256"},"id":"CVE-2022-23619-62333f3f","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java","function":"checkUserReference"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"function":"requestResetPassword","file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"},"deprecated":false,"digest":{"function_hash":"2752453902863807163410918285573210697","length":1231},"id":"CVE-2022-23619-62a346ff","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"function":"requestResetPasswordWithoutPR","file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java"},"deprecated":false,"digest":{"function_hash":"203754774485538115548169853398654838087","length":384},"id":"CVE-2022-23619-6ded5a67"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java"},"deprecated":false,"digest":{"line_hashes":["326861233238980515745626430161754668877","64694730011443345031079325128452555286","64331500901031286530116864835217661057","42741942578737032821591292664455295397","225559120713266195421745190885648758751","114069729190573978099319856589592817580","88730416243340424232394229167675484237","308235930797801263987051604559912952887","43984294380266134015688530253788224441","250178815391151406554629407533364396413","104334265262623386663600894137452754262","155902064098480328535876064715716592325","105787123406870835022384621319119564932","102774701690052333652084250810033221499","151636765463423927451158851305454579568","13833538922462606426954516375610598230","17536834309677634514040186700382462833","259345884953753779995946395441973783538","275420743313810518803735907272354755789","165929629419948324314631184117052452746","157051836744544433061954458483407268561","305226126425268243805994498988513412080","101954306507452549763935915947183415653","126059935594087171713185992937535591514","79442722385961655029917158319222621181","125573994417559272896802246392418182127","267737588922337324087599118804342162839","260386316029854029892080673841433478947","120256946903301964276643729193258854835","59278318351394715272467937930832943752","301248982610541140979247595849916178936","37575016579168115463895491020429333270","242161142544810597716627599887378468323","127756169255262575470826098542306751691","68106963827330120338350997695868978879","298324477577244805368144860171310152411","218229749198015993732724454366033560526","44409445568534234940861091166139900235","325736158127244042902400560644891524852","310828544595537824972187745683456027985","31249332889381973764663278931476278624","83422153155314776716825672261464678878","127756169255262575470826098542306751691","68106963827330120338350997695868978879","29152105981790268495654693796958752132","46838376895638759560646009986912531817","251731883275279218324018102849413504695","27552333383388656473168904163617625361","85142448574658606805669244285590421967","271329563701753566518157064909208479600","75761560494110478197924107290931264926","47378950480439488371930780175427642126","299955337288081891580455068593614298081","278654860316599553908300659300283110649","91890133967543384375869951551362478981","277990362212816895960433727239447624255","277624941352231475125773087243253564792","105858047199129153565785507703353087865","60845209624345094570223211080828015098","46477102508824396029748732121263288852","29371956241676369402347092075043534608","189309176466432420950678671973587774864","132795778097007264357999479146854906417","293857050495337301612447366154402642167","165937599515074582339292114108653083237","99088906017293668575473528879929282844","260386316029854029892080673841433478947","120256946903301964276643729193258854835","59278318351394715272467937930832943752","301248982610541140979247595849916178936","245521341979171379119013260054202659651","224680497188514801241558546214713592478","94911071356627536289910067865923133673","150708182470016796063717816872386802971","283850746618272366147423074352559567793","260386316029854029892080673841433478947","120256946903301964276643729193258854835","59278318351394715272467937930832943752","301248982610541140979247595849916178936","44133099161100788191419590500207446903","88380332855276572043854087889448276357","294038185251023752114374878011864026334","96510390275090513997407381989142172278","116543697864755515133563925512260297685"],"threshold":0.9},"id":"CVE-2022-23619-78cdfbc5"},{"deprecated":false,"digest":{"function_hash":"286768099371248816692768251598920646973","length":717},"id":"CVE-2022-23619-81fb4ff9","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java","function":"resetPassword"}},{"deprecated":false,"digest":{"function_hash":"212469733274861537802463880759063589618","length":540},"id":"CVE-2022-23619-88ce537d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"checkVerificationCodeUnexistingUser"}},{"digest":{"function_hash":"163461922053695622568846902229834121776","length":297},"id":"CVE-2022-23619-8e4a3b49","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/main/java/org/xwiki/security/authentication/script/AuthenticationScriptService.java","function":"requestResetPassword"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java","function":"hashCode"},"deprecated":false,"digest":{"function_hash":"2531407496267474294859334456081305772","length":157},"id":"CVE-2022-23619-9994e4f8","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"sendResetPasswordEmailRequest"},"deprecated":false,"digest":{"function_hash":"39719630839743260205975960477327206848","length":1334},"id":"CVE-2022-23619-9a768939","signature_type":"Function"},{"target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-api/src/main/java/org/xwiki/security/authentication/ResetPasswordRequestResponse.java"},"deprecated":false,"digest":{"line_hashes":["170471661335640466333942474474936449475","257827497369873355759853356151618487863","252832784033762474138397997196177395103","225408180155263446389759285592446193570","187236243080395464725590014578733969254"],"threshold":0.9},"id":"CVE-2022-23619-a0fc5cac","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494"},{"source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java"},"deprecated":false,"digest":{"line_hashes":["203641881120789564856815820026740852761","79553928525136377583139208050381578488","231135040382613063334493614457526458045","141926469565892083166600724362198132866","236570179913261123143406628247104702832","146318242265926065936811964571161702982","177809922470373785634394601904294498517","55744842708064151038120571549928073818","155803875379898137052815750183915828366","146137283274644538743620409568071532212","307691326353388493645350178370171217100","266592341973469487032856649958946471733","236058728020839113382288522447262250354","291156837991034234364318313550215791911","144175654503341149958379559295027500606","80145462798870095395433885084287111013","3569243126867128643992421792932740690","93596277829548710033506070055306224139","70429875622564262096793354388607314336","176457796712658381406011787217984778881","160056760950150148486804417832023774790","226416555875649489090733304612561880722","203032380344404122112022153461293287149","318641118737492075462762903326325154496","258958307335810735482728544442107180096","56475079908676758403610715664774739486"],"threshold":0.9},"id":"CVE-2022-23619-b6c11fe8","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java","function":"equals"},"deprecated":false,"digest":{"function_hash":"219102778253456836124970435880892884507","length":375},"id":"CVE-2022-23619-c07dd09d","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-pageobjects/src/main/java/org/xwiki/administration/test/po/ResetPasswordPage.java"},"deprecated":false,"digest":{"line_hashes":["306896108479805414054904188255569385916","138562523087616960715167776619682336571","329022896558940498054845527348545259339","332823765817170525191226540523133062430"],"threshold":0.9},"id":"CVE-2022-23619-ca4acf61"},{"id":"CVE-2022-23619-cf5f3e2b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"resetPasswordUnexistingUser"},"deprecated":false,"digest":{"function_hash":"199787610247744210211323802536091331026","length":561}},{"id":"CVE-2022-23619-e8df2f7c","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java","function":"DefaultResetPasswordRequestResponse"},"deprecated":false,"digest":{"function_hash":"26594413874101321712582285549372936424","length":133}},{"digest":{"line_hashes":["251206160873673586887050640323971437995","10009587120425894543347705860024625408","192212611705770093712394765293819689346","156028083715141930031026929226526661321","135940000467429469764630694344494788715","58972877785623107195359615981823515740","276688254572987450694522423338695359348","117244869544688058138596692609964358842","127071041109772853460186247700771361529"],"threshold":0.9},"id":"CVE-2022-23619-e8fbceec","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-script/src/test/java/org/xwiki/security/authentication/script/AuthenticationScriptServiceTest.java"},"deprecated":false},{"source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/test/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManagerTest.java","function":"checkVerificationCode"},"deprecated":false,"digest":{"function_hash":"274820917369770920987405821220923868140","length":1415},"id":"CVE-2022-23619-eca78467","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2022-23619-f3ad4eb8","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java"},"deprecated":false,"digest":{"line_hashes":["87364051069233157965068187794440017214","271400081793227358555630048785093934719","241664299832195542628095514575991625163","53935135985501375053106787534524114759","232301979016722836946784370783413792419","215390385625626519155023254693587009748","105111243208605390876444201856440205168","21655672387825012261463634041036979877","61908061475833640741126673542755446018","71261190017647061481264340401066151525","153307044419194502992019446602270841165","91280198660345330598679265836529385149","214285991543852246920815961399180576696","314139706840962697056255450889278043864"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["188973796435427690122678558590354465456","104007426626019940093516921242109098754","211954934955046511514704603885842441181","84802390069016400785452039478184906826","327524115207656691838235781845464080987","274830277377634866752454396291464601552","121175424252466073267257568094260081828","95785986374023271427629701949338042862","119950107728355642658113724690231146775","227837340517909114602061604992931480652","117399290097365229067961669120836764609","287863201900322695519717095053644832838","250335508218956663341057966721029179611","293009586517501064314549378467845404687","88484428093031466117124586386192252367","76624089706289810197421391139216164438","203416549962315599225742506104354766740","202467203847037910058238128228717487216","121506606891338400790572851626327118746","24682265565293862051142878496519038345","336596009630690729209759428468451185797","137194338330912153424113361356940740553","134961781597291707698064361547715218201","295808502312813417990599216112537753968","268872031245624970339511725591154621115","309171515326353332023116956754375954063","99180229429267751919914303468118216260","255813868677239995711348836011710046532","328534008650218938564496504141251511264","38928115181339907167321886104796402228","60962058349745530413400396649341407566","78378754923734857469636732705726666544","323832126203526564527742934188816537316","209533989233729306040797071878664327256","323583610433002018255639178966842711360","140758790099949910410256519756298939050","89941625608381262207091706859551431551","241850314757804190280815322604115249669","269381356701412809681673999693664938919","263452808350961895837849146456215958106","83034337338044058095137263927591405840","108301702887306844902067211625101598235","230432713034732872548099678189887851807","122610978156799868090145132015267362702","210019135048056347153349718851561812514","240200388703300765526598787443678594936","135726101043636955688508962897232933106","202819767382971968794566691488461292744","53737147682651001353377253485743893512","75435551356670033172355923456407629712","291014738086887789564899389510534436897","45191229660738792468449117729005766962","53042946838269495205124460455484410338","191804960390161350203136227104820189322","282847073880063316796936022676418460211","220289593753497037737593831082393508891","255013035668185413796125334685837880982","100053198098565640027910673985554296835","173528745163788823317175272311639361939","300508128805177960938635989357313473855","766593564049874128135039861175621113","289153356026287617094121653981305256980","276983911715128959699420514340875599792","273715074129797155319430411359033166080","22784290919211667754039115917713644942","287433156750065966667414756047807829296","61999250300829162410514365937328230588","101540247421578672112764624964297862349","63437183104753258227466216484801529103","65763504262184412118397407002016730514","268412479390357780070591374945073302343","205357771218528618450031706184854473796","40141178114158661625187306525586720137","40135702467219946599649111107582781622","155987394969260115060318398577964403639","259376056703290605189131818347007399891","205306211025589694354913350647484711302","77489093700852634915299386257974022019","205489335766132744869089424475051951790","59610407827896314525820532949897580564","291562033193393816416059253830995854685","267349865486165679861676550893393833421","334261369241168591711173209265053364682","140193593742968581515169693916690515415","339738666662796012729468773415124749245","281657285477552174608059391209536998171","211641148942745757078327671638541265334","136171046056875600477952419089096117718","70651226471688466749597954804172562402","147008821991814034152308288951347344085","117670900022063954980714078568953220283","299025118234955663113180584384420657384","230587359935208257624490359745874204918","115574138644486026430975135597645770866","333981690898475182636360041220916077818","220587429784415400652368274409245480731","279345279989122686975976541980156218385","298892570193166105813911814776620383755","160112806505789408762065548996895445651","216530329249923398748729324527270552974","45217235796343048499523690637718934272","314823295944846667903578498817341619291","10294839436693783755582488853081524156","87518615958601231810170696309697281326","3158571481029134476254672983309920037","259258150434545159172330918820617749027","273306277727090185247688750702063174077","319473310769565338378034621901327640586","159188753350952860100741038496398357057","259610659486998705798931582756635666561","332394255900658039808907591720308106965","286483973565035789594016666745641719599","139378914684521363265694194936419817387","293449525022332022339692588655080260459","22914407984406881680522041101291116632","116038880471220894320519657450918515674","244864711017732669470509080121868754973","252584138752795765947648296114197354749","30091828569616427037148738206414688017","121141695238675793764009116914649643216","46812459600443265686126856751015572956","91447803478762739602711326174871864","221311956824298173809406347443469391992","5988309914064601951091667194045728851","59785075620453402308570461309699413413","80820909491430619915764569042345154114","75282505193354750030030254676449171794","147008821991814034152308288951347344085","280271632270849290113112685794624410238","27656332021247554783166483054198234470","250145056093468421601762475391629913432","326269956682673591497293080932236802647","308487923515502669908681695109529377360","327589949430421859203968079193338065663","90576602890231816670622566346488979613","256153266954381331551207504636563929037","56261395946095919314262759618067472347","222098884251611851131085530966547361754","284821542584949333297036951700089879379","147455823985592973136678991055018718289","184994328914957260988796469525289880017","299263240756077411129234978163446083876","252620262345507996102452931670852438018"],"threshold":0.9},"id":"CVE-2022-23619-f5daf176","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordManager.java"}},{"id":"CVE-2022-23619-faab8870","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authentication/xwiki-platform-security-authentication-default/src/main/java/org/xwiki/security/authentication/internal/DefaultResetPasswordRequestResponse.java","function":"getUserEmail"},"deprecated":false,"digest":{"function_hash":"235341849210978496302473072382240752829","length":41}},{"target":{"file":"xwiki-platform-core/xwiki-platform-administration/xwiki-platform-administration-test/xwiki-platform-administration-test-docker/src/test/it/org/xwiki/administration/test/ui/ResetPasswordIT.java","function":"resetForgottenPassword"},"deprecated":false,"digest":{"function_hash":"178680478585473668953496571743198386800","length":1813},"id":"CVE-2022-23619-fef222ad","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d8a3cce48e0ac1a0f4a3cea7a19747382d9c9494"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}