{"id":"CVE-2023-25157","summary":"Unfiltered SQL Injection Vulnerabilities in Geoserver","details":"GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS) and Web Map Service (WMS) protocols.  CQL is also supported through the Web Coverage Service (WCS) protocol for ImageMosaic coverages. Users are advised to upgrade to either version 2.21.4, or version 2.22.2 to resolve this issue. Users unable to upgrade should disable the PostGIS Datastore *encode functions* setting to mitigate ``strEndsWith``, ``strStartsWith`` and ``PropertyIsLike `` misuse and enable the PostGIS DataStore *preparedStatements* setting to mitigate the ``FeatureId`` misuse.","aliases":["GHSA-7g5f-wrx8-5ccf"],"modified":"2026-08-12T13:33:56.361966Z","published":"2023-02-21T21:00:13.392Z","database_specific":{"cwe_ids":["CWE-89"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25157.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25157.json"},{"type":"ADVISORY","url":"https://github.com/geoserver/geoserver/security/advisories/GHSA-7g5f-wrx8-5ccf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25157"},{"type":"FIX","url":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/geoserver/geoserver","events":[{"introduced":"0"},{"fixed":"eae3b636d9c18da2b5740743201bff186ebceeec"},{"introduced":"f4b719f1a05c1967129c8f717e061df1845a3f70"},{"fixed":"7ef8eec31e40b35ed959811ed6e0b7e7da397dc6"},{"introduced":"d4cfef6233532aebdccf05a719c637df3ca9bc73"},{"fixed":"53080546ed9aea4a216d6c622a81833640bf3b8e"},{"introduced":"135494dccc2c50ba4d0ddcb110a55339081163a1"},{"fixed":"82696768e768e7f60cad6330e1c047b143dccc18"},{"introduced":"819df84fc5a7ca0bfbb9977ac8de28bb4e8e88ad"},{"fixed":"afffe8db210ff7ca141555a2e23f3c8dd757aaa7"},{"fixed":"145a8af798590288d270b240235e89c8f0b62e1d"}],"database_specific":{"cpe":"cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"2.18.7"},{"introduced":"2.19.0"},{"fixed":"2.19.7"},{"introduced":"2.20.0"},{"fixed":"2.20.7"},{"introduced":"2.21.0"},{"fixed":"2.21.4"},{"introduced":"2.22.0"},{"fixed":"2.22.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["2.21-M0","2.11-beta"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25157.json","vanir_signatures_modified":"2026-08-12T13:33:56Z","vanir_signatures":[{"digest":{"function_hash":"91802256307116161469384286580598204207","length":585},"id":"CVE-2023-25157-01a826b2","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/OracleDialect.java","function":"applyOffsetLimit"},"deprecated":false},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"18218770944982999080769567715364345173","length":1330},"id":"CVE-2023-25157-01f2740d","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"265344251451037516890487553757512752570","length":172},"id":"CVE-2023-25157-09b59c77","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"FilterToCatalogSQL"}},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcloader/JDBCLoaderProperties.java"},"deprecated":false,"digest":{"line_hashes":["317961146565049784775414798963699161834","283807000312150068639753571291985183840"],"threshold":0.9},"id":"CVE-2023-25157-0a017527","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"76738972918962406935676278289431837790","length":205},"id":"CVE-2023-25157-145677c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testQueryAll"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"235625873325333005791611048547424373932","length":386},"id":"CVE-2023-25157-16fc172f","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"testIsNil","file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"}},{"id":"CVE-2023-25157-1b3c3815","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"},"deprecated":false,"digest":{"line_hashes":["64310613874368025683066107385007528031","316588331844186578718125916779764469432","277826857610311431470549634520209609701","105764298738169071322247689140973176354","36235352054439308968348499067237200812","125513512924618976404571552672589709822","295506943394842768211113448627503609243","224993213624891508619833445788553879684","66896170970824711838647042917158980182","78603619387646700530427675598310735262","4577248870170635697839481489990191202","253449491185219509732811996447487881870","144595270623880607625657678700278985419","271757471010615932926547619446890611369","174990288938766641985335784741211251135","203672505991129634936874571912366459393","203428506074151522531645219675565129482","163647800144598691204707518769343354443","259005657293947508668710230080861632754","241655620030814951596453113854903673516","194863972395296000441185507381913577793","38918392810866535553561743391251497311","110622612642185920503528192653662070008","250497192704177605387473224158287383776","75748745582186652734869281953444564734","90977661303946509229604607320146997480","235303332455523932405266681885747984811","189236848372759347129123593038956657157","47411846142591434059169011169000069065","138520643765168329110470405698821518608","179981638760880671295835214246376392628","37882180929123143598809887615503997","1517611485113563500884688502010957371","75748745582186652734869281953444564734","79883943101871890545421556433419511363","320330948481125885971662106549956151235","75516359416367493753805774457997668199","305679838807025089537143832812632091681","275430495863461301796532880274761297958","333813652314494114888891497007305152283","205341038875056651751109433782478575383","96097867034855240296847791221663097167","75748745582186652734869281953444564734","246350269841439011741658834396618580857","247157764628063290594792761139401585851","295743717058370794221403846569596354296","325033510140551817842859552757159389695","123893782744574124600244957446650631910","85410196778815815030371940434967236124","21711250185736251621371878456168336898","62518843508917542786898994699787236575","324410125370464030317420389200435937785","173170954613645368328752923069574388013","195485054037675008654324568626987401578","262699698714256081942963665421016327707","246350269841439011741658834396618580857","247157764628063290594792761139401585851","295743717058370794221403846569596354296","325033510140551817842859552757159389695","123893782744574124600244957446650631910","85410196778815815030371940434967236124","21711250185736251621371878456168336898","16130784555873822365376086412141825920","34803027031875497702932729391181786232","147403972496177444629433316491105939044","14229532577866977128553297642372803725","200574907256997593247454566552802031087","163647800144598691204707518769343354443","74716605835259376309481381332797403815","294283807233904412299056014535117247765","263840026438474472646576672770044992658","219147094902812178229255496995029488076","4457366555601916997367272018248230422","271959337456143630881719997780380022191","249279794614351828415888501164253570878","43806241203026030504933729529162062317","139435722926808379637633560552030293577","34286744826754920876868993809944669743","316714462266096311927022788928640485029","301117290117299507951233305957034372850","163647800144598691204707518769343354443","74716605835259376309481381332797403815","268449379473837538344923035897051100","61655505715031637393672598227567966313","100350021458391492734502613834015537444","263063942040987037647621060174204184160","194026065196602169530660384277634203388","50882171278889652675996491036307661601","310311992941303805705679736086109159582","85117970701326244732451952816063158164","163647800144598691204707518769343354443","74716605835259376309481381332797403815","268557559991935755356049397266574913622","151061475211615354915989224429653399900","125963816519948065833435942862121776898","153054308866427569917204451886880577313","69896059511149479900764133254737478786","42698257189630624623096754922998253894","84151856527020724140776660091402609419","187380926868565267331911785484481486723","180463680137591268353870317579392112309","136104391295302682380089200410245027359","144124187175366162128363373341397158863","85117970701326244732451952816063158164","163647800144598691204707518769343354443","74716605835259376309481381332797403815","180747417953343847619597508703800262165","189537465027731340579665223909647346299","168970692974873898934510130937750726400","201953000479828053468107005068123531553","264482336258619122954512618528875199979","310690434228262064752663753731248225416"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testSort1"},"deprecated":false,"digest":{"function_hash":"21108653199679484671262326302093694215","length":237},"id":"CVE-2023-25157-223b8b19","signature_type":"Function"},{"id":"CVE-2023-25157-2a4044fe","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"buildWhereClause","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"},"deprecated":false,"digest":{"function_hash":"150902907440324821045217229595127478330","length":1275}},{"id":"CVE-2023-25157-4108c859","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"query","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"},"deprecated":false,"digest":{"function_hash":"47953061768207855169419722563474244701","length":2644}},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java","function":"queryIds"},"deprecated":false,"digest":{"length":1369,"function_hash":"334900999823082935218102351960379748775"},"id":"CVE-2023-25157-46c811f0","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["11390585830861352739577765193996750609","141118312475347008728668444972697623440","284094102341304025777017356135617158311","100931158021554910738547471580253444343","92765066225714935304643049789530349719","336312440219729713664949034269338751712","102903920817022778025523815322259662084","48887058681269051957029161773299741778","135858525027308184897719497507601752731","256304743440348318773243931772931761725","283874122164524960681659168171857932981","210111825000737090489807091697999079147","226123482547084658414747234453639977519","269262737192817928109593858770436457772"]},"id":"CVE-2023-25157-4907a1f9","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/Dialect.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"229473913925242779534045213885541492244","length":680},"id":"CVE-2023-25157-491b9bd1","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"build","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"}},{"deprecated":false,"digest":{"function_hash":"69425298391506993838114443564173185854","length":331},"id":"CVE-2023-25157-53bf67f2","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"testIsInstanceOf","file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"}},{"deprecated":false,"digest":{"line_hashes":["42284839936145831507334355821296921243","152170266996909938972373870066966032245","243004994776835803918854413521392660200","263655907155131472435009249293470375146","165509597340729998494020297351121288362","233737483970846850004638374087148571821","235136524354573842425441904366883913181","146322212699917854743798648541108875439","73024333321212068336095827341055369004","97229828231416877532185062890459389887","199049345196991607038132946303366285953","76868861226179479971278714008178152814","247097671960643256884546253709343913853","169718759434261847387129451368828144647","191094161433495933878307766769192928014","114320551527814471746671980385707352772","167941882043273757375698743380499256691","20814017000477701827056007674470214177","173185936874193529191062559786792523117","217539069598480467724852696924709449833","308698845319438024987104898082496651244","179266922343210723454901733993288703692","308651014868020457109475783114328953253","284782675215453773215467245561518672689","155642930483750859128462927999708195967","35768487078582324345451314584948472064","203557795192904300313367147081001905763","316492934602523982954773838419447719573","166484608093700523692996098542827299314","303343660027565563385090888590595003150","45318883547137510288645200308707191022","104593172806922888461688826387684507487","313204178531278833787816217403926634343","221871939985263877784239690244237151423","286356167998952338896002876367958134572","162232735539699532615320155292084331655","72323147263639847244641550697000098518","63554622149139053139008936477855683389","221716884711376772942152493806801010428","184142597016894635757702238839979489342","308093468304745456856209100641855564587","125910534694973924313475636529356345565","190073706014396484464761288485160911745","265844771922445117799911661043021500237","148416662975223822635129287446019771617","235286196077772804856922866374271342583","61412762918626624226705261781357300747","127400611530250232104644550008238936594","281812948233866395110412396117742344432","269366564673577212171973363815840082711","258955225060154685903162754578009659167","214656623888425469108906940750986334780","257437869989991022747265626424251565197","90009252734231959760152593246109199368","259992332331844117866155412423554459554","187826215562251668390580965208243015186","214044104878430470918893404110372602753","211761836810128888275382086313177016063","29170465571647659759863911679865727924","268990320379268246203992289704784108868","310162217444343019353292625047301706749","290497731950616099750461290429350896769","303403953045447684810786983468188353514","90686201542339963853830646387422211993","225540491758408583744915933123317951422","167194482983045049131121765906882697646","219931747329763900983429556043713240026","159246404141585334907905470675591195998"],"threshold":0.9},"id":"CVE-2023-25157-5424160b","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"}},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java","function":"dialect"},"deprecated":false,"digest":{"function_hash":"33720478658561701793247715535226028654","length":120},"id":"CVE-2023-25157-6118f3a9","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/OracleDialect.java"},"deprecated":false,"digest":{"line_hashes":["228348215429215526419135979022875812","242021834607453602332829451914827073765","155451949499882935358590776548388319253","183882441931191987473386137360362487833","145304530042032263075966785963992344068","240842924111344282179442407386033765130","256354659300438983693842549234083421632","304610183545893049067750821810784493130","230048792002889749716980201703207008582"],"threshold":0.9},"id":"CVE-2023-25157-63204ddb","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d"},{"deprecated":false,"digest":{"function_hash":"28780885622107722891154158379397932643","length":330},"id":"CVE-2023-25157-6e0e7c1a","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"}},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"330314054368860616946146569385154575164","length":435},"id":"CVE-2023-25157-6e7c2c33","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"131043723115324882667081549110777174651","length":324},"id":"CVE-2023-25157-768b611c","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"detect","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/Dialect.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"188177864093899086253037928130281368349","length":110},"id":"CVE-2023-25157-7ab499ac"},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java","function":"count"},"deprecated":false,"digest":{"function_hash":"174144131377644232396529865368357979414","length":986},"id":"CVE-2023-25157-7ea779a4","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"307415710314258654188744990275243382680","length":86},"id":"CVE-2023-25157-8b770f32","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"ConfigDatabase","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"}},{"target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/JDBCConfigTestSupport.java"},"deprecated":false,"digest":{"line_hashes":["196590214877542010649512489543078070495","27074876639885036695735604286499394638","257875272864951129168213679885975395341","205920716369915455375618038270301937002","259478425870235435794018994403028648680","46000309983221428071247380525888407783","22040097978273525681917994126128435722","91646455011344759735426134467183432502"],"threshold":0.9},"id":"CVE-2023-25157-95f8d98d","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d"},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"267898855118706775301429961450925566947","length":156},"id":"CVE-2023-25157-9a356116","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":271,"function_hash":"4941677207787540342876310538229582759"},"id":"CVE-2023-25157-9e27025f","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testSort2"}},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"125370331033763173560582449511898807679","length":442},"id":"CVE-2023-25157-9f03e7ae","signature_type":"Function"},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"visit","file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"},"deprecated":false,"digest":{"function_hash":"257610976538751402879609248632807507436","length":110},"id":"CVE-2023-25157-a4c4caa0","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"3871907045264911584625640530907467829","length":472},"id":"CVE-2023-25157-a53a91e3","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testIsNull"},"deprecated":false},{"digest":{"function_hash":"181355372553409073930778319585173171791","length":1438},"id":"CVE-2023-25157-a68f88ee","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java","function":"querySortBy"},"deprecated":false},{"target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"244649586545139512157181336767084946296","length":423},"id":"CVE-2023-25157-b8d0a6b1","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d"},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"69182911191203396811068776856211672904","length":2920},"id":"CVE-2023-25157-ba5430f9","signature_type":"Function"},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testSort3WithFilter"},"deprecated":false,"digest":{"function_hash":"271696332402165130429957133813034510255","length":321},"id":"CVE-2023-25157-bfdd7d17","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java","function":"handleInstanceOf"},"deprecated":false,"digest":{"function_hash":"113586329994405796709138630237485946659","length":362},"id":"CVE-2023-25157-c03def4c","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"testSort3"},"deprecated":false,"digest":{"length":305,"function_hash":"244351918849134611421195100575428614032"},"id":"CVE-2023-25157-c542f120"},{"digest":{"function_hash":"83332967385382329256979680448040722220","length":269},"id":"CVE-2023-25157-c573750a","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java","function":"setUp"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"},"deprecated":false,"digest":{"line_hashes":["142271494971195699056263425483150790214","224586210592102339894185306519237675713","300583695589433988635113548041817173885","200901449861271985344905895590590380862","109514712855518934124768135680978385894","337946514552037680530000978805380497230","86381973531271177404878594317952636697","335276966632064354272853715707176264812","17202712478396485947844643041797338911","132493253786237720427490736646252334595","285580071551318954091289523305380841432","37037593325543636136990370826182530802","4100908194664371372092858280301155752","198118148584837889211564053436563165411","130739438786488331265680399431678386982","54604281362842146619852662164492301488","142722510094650861984149893752956497536","165462529439979293443631440385720265398","125362077730164574614930508742754450676","281568999191843051570325240249312790022","205304301790305467386190679291397629108","218240644819087053841623363431102436439","57061743209900962762025532236609144923","253811214176445028599370452719299604882","19712151940296576769039653259277688041","287184449285677035147206704514526762580","13606077513413489858137346209998326544","256455841378294257780577844518944501608","102164827465470062792222716593077115917","240910132807439779817247244656843449616","248273761234253109105449276226470378076","338914240087410314078142567744921621725","161457192666224752235019505690258551798","82332786934783919398977985183760537327","262390994545990129987275399442275253502","127943257874713266821958663445306471316","253349718169420529813054329554876498184","201300576178640251598961755041048005558","315126050829863397481738101109314741774","245620006815055486849390384864937129957","300554253588166478991992915761731505159","261804811543768509766962862544287087204","242398846556612196019630295904812135406","127943257874713266821958663445306471316","253349718169420529813054329554876498184"],"threshold":0.9},"id":"CVE-2023-25157-ce810a17","signature_type":"Line"},{"id":"CVE-2023-25157-de4da8b1","signature_type":"Line","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["261216384066153937671249948995728548061","56952663401007177135506848476169354590","15282067845559452977615407600222250215","268301147238335166497301834486078642680","37472330529006274106764735460154671717","228099433135740901648370130604358770590","46129994213942073777535623298189466503","125021200729919637931905009367394855791","15601602431209337148070002165506085248","234385641721370470087118434997001212415","175905188422221838275768962234191396980","151482677433911766663215111260563906354","220265750862979168545797254406413369581","77641858119472096007166009783670367224","201013143130955304195661547372506927346","15373100407310897012009303795351322597","104526400678035138264093667721927174896","236699988453944309606401560043949350938","261389108867009849369288305708901572539","335448625717526983159834075532593946449","68637767803453442829513534125084775368","174156968999241862966420588386298072116","151397559176880648043030296281833776056","237720448948462426598684037544537583505","195726193653773250798282090893426252990","139896480068574272769478188870895781771","188681826026848810277659693211012681860","299343170493088743204410053229905494550","208826204457710709545207784661426658165","336621448345830662111162584731065569664","168412333935054065278547248293712540732","265387129730349773848107981135065985474","289451275845980783258008201678818297983","22541671181231378474178704047146607405","185848228913088378843996911648492689812","127079149475251296675498512192973054717","111441107857766189401560501713582369366","195117313585363641686781406391948093691","244044065252987239459283157897350912568","72890183272683650298622597835768259467","194644924733513012259752496085723668125","253474736573303147397584213114222213151","236558019009052042421087771527190501527","297430049725829822937104949541962929560","93595660470280799675284274148211514570","241779472436095349309843052929886367697","319944348045568013933090153329811335495","299232605435093084142790991738681016666","28388413982784288571574660185222140433","54810736798651734521325030356987393113","265387129730349773848107981135065985474","289451275845980783258008201678818297983","22541671181231378474178704047146607405","185848228913088378843996911648492689812","127079149475251296675498512192973054717","293344308107926605549407484259074046500","48619023061676813771522026724683928210","332580440765047312830043219300491514625","78745541802266269769713121323283867529","194644924733513012259752496085723668125","253474736573303147397584213114222213151","269532064734375133423266443239579342571","277667494406956300671411776836417387801","319809089687551418666807947636876510776","131467620252152549954066206195440044341","319944348045568013933090153329811335495","299232605435093084142790991738681016666","28388413982784288571574660185222140433","54810736798651734521325030356987393113","265387129730349773848107981135065985474","289451275845980783258008201678818297983","22541671181231378474178704047146607405","185848228913088378843996911648492689812","127079149475251296675498512192973054717","293344308107926605549407484259074046500","48619023061676813771522026724683928210","27754468511866524113230674035231684837","210078009088521526354169236858922796590","297013111468792245647721139256923201063","71213268640848418420524597456577717719","234403942655290419574547853613756855981","19820798872077551136543814938250137657","288066413115903900930069035475353656271","97409769641929344419304561308643706998","167378733889959668246998331448004492169","1174536420472219303074954704939984157","337014123491082209481288595105496845668","333985588243726457942233678301312060819","24303535667344293376388705129736533796","183594842233994274610166254623412748160","247927639867169451080478728483106771263","206663550664240698778138722435945771440","298890413472401394934858153207084260746","210838398058396033446847334272031674905","298825152364664415186227004017140422420","82822542511531603675880858981541684093","324565227219232026991996066895532715180","9589092379828466842482644922346581413","292917135946717708463015898715567495612","139896480068574272769478188870895781771","188681826026848810277659693211012681860","117585444490306724806214768900055886510","2336877536424243117749445848978471433","171322524026072457106374300456932193972","34543411329608621421276876064208947881","75486994529588502213800051017588577422","192445386993118663751639709065366458869","154091367907782769933965372581155058428","243711665414250609914417424260395464522","244986098293676426565075353317393440522","253474736573303147397584213114222213151","236558019009052042421087771527190501527","297430049725829822937104949541962929560","93595660470280799675284274148211514570","241779472436095349309843052929886367697","92685542349496479583706875853846299764","24617316411714953445709780240446852915","112028848543822738308915266707772584962","202864660755172342693488763996015348031","23743038151866320551355358194903675577","89416891715437045279158684410180256361","277737528743421088686625526533067505156","150091020381440984924172528984949953444","244986098293676426565075353317393440522","253474736573303147397584213114222213151","269532064734375133423266443239579342571","277667494406956300671411776836417387801","319809089687551418666807947636876510776","131467620252152549954066206195440044341","92685542349496479583706875853846299764","24617316411714953445709780240446852915","112028848543822738308915266707772584962","202864660755172342693488763996015348031","23743038151866320551355358194903675577","89416891715437045279158684410180256361","262714632107718302358224309809335048859","154503017353587539420150011524001285506","70654025831977210830190821734437091670","149974932848721872878372450748949336743","288066413115903900930069035475353656271","97409769641929344419304561308643706998","167378733889959668246998331448004492169","1174536420472219303074954704939984157","239794410055181504635583675491987139988","32546936829648873032771404989387852091","219350823035060613735777157206559127793","286937312459701642579637288360869305305","191807256602110814552169904452987592224","14471517480790908910916764886781037904","172238782073441923836619147650658864394","173138183438937538590133258048815276145","70330778558107713693688123576921246015","257413726780481768674070845989074152199","73316504408194853523621201837502423140","288258759040042017911461344619176981664","245198683850319127063174665832580215886","299720958538902863075388953019638808490","328696077817158780327775707332328060366","237300700207380990778931093278830106969","31359407006662564697954492758190064421","93803152502750036716750902914328301553","239471046892171315460609414111197756239","153629295046931122936168287493402585553","95594289335491740980167659740692085548","195726193653773250798282090893426252990","139896480068574272769478188870895781771","188681826026848810277659693211012681860","117585444490306724806214768900055886510","2336877536424243117749445848978471433","171322524026072457106374300456932193972","34543411329608621421276876064208947881","123354740834881056172078884432972942186","72392258668406095457597014935274189888","235688399132817843816052176967363463553","119928501952195499569227342921420831728","318710452009306785546868435321585210930","79118186506499747914579858050262466382","236558019009052042421087771527190501527","297430049725829822937104949541962929560","93595660470280799675284274148211514570","241779472436095349309843052929886367697","92685542349496479583706875853846299764","24617316411714953445709780240446852915","112028848543822738308915266707772584962","202864660755172342693488763996015348031","54964845928320202192063606955748222402","244238835522243289140205744600630824719","224745994151298515361266966737181436300","41998650419241433971506464299029547834","318710452009306785546868435321585210930","79118186506499747914579858050262466382","269532064734375133423266443239579342571","277667494406956300671411776836417387801","319809089687551418666807947636876510776","131467620252152549954066206195440044341","92685542349496479583706875853846299764","24617316411714953445709780240446852915","112028848543822738308915266707772584962","202864660755172342693488763996015348031","54964845928320202192063606955748222402","244238835522243289140205744600630824719","325191024643180429528630316720728531570","193256654447622767005314826936225757043","111910740752573138402528258695615327718","158735758664918154090938710522354120924","156620472235128322729773304457750804073","288066413115903900930069035475353656271","97409769641929344419304561308643706998","167378733889959668246998331448004492169","1174536420472219303074954704939984157","239794410055181504635583675491987139988","251161423397965712107027131933870857015","145395517544044884072128023575870673220","195817229419261956073024304773309853555","336677109514545121917693703414544952925","70075055841339162972051542614839478456","322117044062853598252325964056122129610","300671272767286288331470251241142195753","25052084581219249576932733804090869062","24131030700504388923302612112752857264","99823269396607217030638067524989965839","182514633748148475231372437313033823432","134319561083711280447969963474647257889","332358929850894956839937038309684400333","123453931969777868780195769594721068021","90741029386870831107886485651549192630","9959875300491582295410413602235365945","247759089051649887142873928803499369641","162278997098518374491985713813404182831","86868993845830183200181550460914775019","24874324394389278912468981590425635644","120861368980238786376918530075699866493","334648681928664850545033044386234088696","148035133013483717802266797527120716128","125658595138786344480752652256365199172","270588191625886862551714930155884186189","99823269396607217030638067524989965839","168639852334027131764433242316426018814","37711479433665690582426544037849453253","1436636349215198774125521518413248012","15751899141255774125688380948833984469","90741029386870831107886485651549192630","9959875300491582295410413602235365945","247759089051649887142873928803499369641","239256570092715777071667911925904092601","132505673389539316407045301806590996060","93114995798125954723018484881236769727","325809620666755710445889378320351545789","103013117935147301130754345561195418158","85702809122103453813430699094939578791","325455210331063982409550913124663989313","47360160144562486504712481945462684067","240125324846648742936961458068853011990","63907035335262837148414257723740165885","180058005656278716538308583173626534525","20160812320716710730921412631026893582","117245279556930885192686743220624727664","649211954517503745037357234112854025","199046476913141471846748073713282933409","48483587612260844228236444068719054558","275865396426800427610203329847147959406","82171436678954901493959323126373213194","211148389903838282302524210592244105652","138033048617048179549039459634505892240","154096351655424934045838379654816353180","47360160144562486504712481945462684067","240125324846648742936961458068853011990","131707824069761395093975952218219444618","24617316411714953445709780240446852915","212472408326301647111936716383730975939","207758170864742530004505975082558301022","160085253955745538614131743526968185745","16257523275639054738792845495559257945","82171436678954901493959323126373213194","211148389903838282302524210592244105652","230492467339680616668741686838110240137"]}},{"deprecated":false,"digest":{"function_hash":"297680084188835812588151844700475328597","length":94},"id":"CVE-2023-25157-e704906c","signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/JDBCConfigTestSupport.java","function":"configDatabase"}},{"source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"function":"testNotEquals","file":"src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"},"deprecated":false,"digest":{"function_hash":"199489663898351362392379024411406808626","length":386},"id":"CVE-2023-25157-fe2852c7","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d","target":{"file":"src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java","function":"ConfigDatabase"},"deprecated":false,"digest":{"length":575,"function_hash":"173907107439358603838367028787844104378"},"id":"CVE-2023-25157-fe380e2a"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}