{"id":"CVE-2023-25158","summary":"Unfiltered SQL Injection in Geotools","details":"GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore implementations. Users are advised to upgrade to either version 27.4 or to 28.2 to resolve this issue. Users unable to upgrade may disable `encode functions` for PostGIS DataStores or enable `prepared statements` for JDBCDataStores as a partial mitigation.","aliases":["GHSA-99c3-qc2q-p94m"],"modified":"2026-08-12T14:50:36.549809Z","published":"2023-02-21T20:57:47.754Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25158.json","cna_assigner":"GitHub_M","cwe_ids":["CWE-89"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25158.json"},{"type":"ADVISORY","url":"https://github.com/geotools/geotools/security/advisories/GHSA-99c3-qc2q-p94m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25158"},{"type":"FIX","url":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/geotools/geotools","events":[{"introduced":"0"},{"fixed":"39a268ed0974c7a89040d1fd72c269965fd391c1"},{"introduced":"d187663948b47212514991a71c0fc3021908b034"},{"fixed":"535cd4cf83fb7a5dab6622643df53f193cc10712"},{"introduced":"eadab668a9813bf253a151795ed3e38014acf288"},{"fixed":"2d71c64a4b2b7e574fde1d86da59fedffca5ffe3"},{"introduced":"8fe62b2b2d7b585a116d18d3217ed5c441f4a1ad"},{"fixed":"8bde28f7a6349355ea46a4fc3b9196fbafbee7d9"},{"introduced":"93b0abe9bc755432862825e19306e8b8e7114c2d"},{"fixed":"558cedba96f8d4c593a362982ce55b7a9e6942dc"},{"fixed":"64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"}],"database_specific":{"cpe":"cpe:2.3:a:geotools:geotools:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"24.7"},{"introduced":"25.0"},{"fixed":"25.7"},{"introduced":"26.0"},{"fixed":"26.7"},{"introduced":"27.0"},{"fixed":"27.4"},{"introduced":"28.0"},{"fixed":"28.2"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["26.1b","21.6b","26.1a"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25158.json","vanir_signatures_modified":"2026-08-12T14:50:36Z","vanir_signatures":[{"digest":{"function_hash":"163755290397782995154414314356763528560","length":595},"id":"CVE-2023-25158-02d818e3","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java","function":"getSQL92LikePattern"},"deprecated":false},{"id":"CVE-2023-25158-046e8d45","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/test/java/org/geotools/data/jdbc/FilterToSQLTest.java"},"deprecated":false,"digest":{"line_hashes":["209110513914125057670019774964309617587","250086335152026963046363566467213731088"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["65998840243968733630792411207665878276","136395948910669951176977886357071514136","322966140665352483096800457744706823340","6447490896449711609338366091331318625","284032701748269662742541092530623098331","212925241539731358181579747384756889310","204809522209886200295656702351985976693","221717247075283143599858045277125028947","298018206751964531127979305754531163492","286055267729045557495028008029937408967","266687042493357500192883262862798900567","273954843262281514821311445470911875304","277584759005131925808481416224911439571","230096809342980948770975667147141442942","337895703607015457109695763279718994377","252216837450533950195907222753225066391","287020405229437038620402649781249881900","31437074589055244279092767165127965047","109930026561059401989432996677175086756","5831371444802740353934195273658321541"],"threshold":0.9},"id":"CVE-2023-25158-05bfc503","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java"}},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"function":"encodeJsonArrayContains","file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"},"deprecated":false,"digest":{"length":564,"function_hash":"176471063969650377984035865217326993959"},"id":"CVE-2023-25158-0e1128ad","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["123787570644390735525880817816942005449","164095225716398873540067205652830164649","257798280183139329179460084679562916108","80969072333215072296538330500263014987","273437422026148698214736073592000514324","171585600895267335104289484174911376322","125390332270162380296716803571910775900","136587821465593448865763627100145859022","184315645794085865695613713020947383912","225092512294473748696293665865417804526","31546665874475868178273804029764126440","45144903141936491798879918649986395916","326336598317840987262936698228558219570","17816699426210627568174665655468124142","198620217696092834446035390866013589147","299857889327098831211543316939091338113","253254663706906541362342132515208555899","64694466823292855045303097310363607614","71282333520511394771760167646383851742","24532418861948179050786307530871180782","193194219062903523410812657841975432698","209715611957441015648925497267718843132","4701840045240993945528465673204002605","277537104439529475138995454805199162075","303409074881983922825340868074098798976","275826582938133273862916980176988209204","74995006875324462831086506045807064412","284946373842136369432269258529280247102","217571508603587429396605429953230592946","336148578708911109204968815812700612035","277347746715254637365803957747251847071","25380615773319560687437290690123398997","263940640078784970199776690149486859659","99606008305589682567844418074811079766","95836834675306819181284870669722236960","26809114201143607394520977784511873640","51674476199931383611238680883631617048","7335329528841453511696290302027244855","75049934116851457941808371958380803982","149363515311715244844620083803845342244","299917687668051538451473251944195518682","150050245616636575073846402573623244706","267824657837088350165901337730374893046","199034789233459770763886456062978055638","152158944767013969364554668280929296237","325611535906661983838675991749569471648","199254949243010632245109539842765182001","245387674303943398347551118871641063155","212240624503213923121640575087345979616","159115181348154673487380372188935879322","335389178673023557583907042193044223623","108792282162936301521263554340592139027","202618728735553527872611363179914150900","33872707008064366060709444309496799308","305809134895475782887282521532843240625","111092064926313028252494554905337459214","109995667097840593889765859000507429375","215007985297151755838608028682776657184","179780173052421435741175697618600842508","208187428707749874942586792935548116709","128422964793319390744494727546099214126","218804424118165506090376097543472978554","71878926361921571443569627657905787576","83862214205467341378951413213383116181","171974827954301331598265076395810012547","167033372716754291195373460664050639665","173391654103959032675580601826366877640","10596532323663677581254401381033796015","313913392689524297005910540903183808344","130994986805593827749655072714483725275","302271817633992081641866557799836562784"],"threshold":0.9},"id":"CVE-2023-25158-139ffcb3","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java"},"deprecated":false},{"target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleDialect.java"},"deprecated":false,"digest":{"line_hashes":["297831320169566676799372933429591570097","56415513774770953803212204135372923175","272289277610069056426176072757600471862","278604282487832181508620460504683108650","70417362694971342291440768636993126394","66718859536829873084810145357819248330","300219340854471230063084015200696586327","77360264185645965944336199766301885921","77334209169854557707010468552738651921","109259947694729928548030363950900327031","287382573466914253675351114328934623637","254366799748619016154550334746078926064","281679024530974489795264610671321791559","215455063928581831897770055638431758895","44344721945725259049444904898268413406","315240290981314819237730622406548934269","27211865668882225027558798910478833356","196006171449175456192941193890294627630","210394482540587927740267156227569991380","267786690073129632161241761310469275470","240002281256980133721664340579206995993","153837745809604244857836563863236074377","30605565276222300387349520908490413282","129294536086267319367457331093963345081","306805517134974679450440399366877609769","226942355196952599606314342018298481766","267600095963041817815346474175005491561","49445453146729717476237299008671873527","197783900499415278861589641078883443293","293957320058052005032009447085170327889","231224441445308852093910825573853276873","336231372669601798798677889788449743670","165860537504281819710631720970782281900","25292674665909350021042720737835097637","225846119813242256335478224184227295947","32025341388215817939689715305188596026","64195250360856257263702277561246604084","252103598250897479730207916298038856236","241129312945390504138779665646145121490","114278272287726325445236510207095702447","241517753072121970629687792860777193652","201042617089692827201579175936885853165","1330403821291538926726785569102893184","198275711471925514433065427724278463319","276608006977590840548241571508418439500","331182211058931688531553681045735676767","291206366495711166163185676021020460494","283141227502363326076966148770022821378","230731906180052362268124870446012612057","166454369877932903583339145845365146040","122131748596049452504297880944571178558","109781096962421971035619230632799020891","240393105134150898867925623417968966111","173191341926236436644562342770335452474","89173067701342967672783133876281905642","85457733359186552548144688703681556407","263029053562575984200502545635849809917","159871476685655729034491508734680174896","132334141434339087264222966556151630525","13135056028767283598037460615726521962","94453748986910211426796835800948217254","334556455250626119573742930677906151550","306985939371377444807996753023648962318","136560481614850163828223424994166378378","170156116863667254622544236902267276382","66847139890378896898689545137781253330","283944142144991067527124651397159936286","12531151584515819660107440887252237974","219857934433732268537333586835161489908","22516558442150972976642067751700029260","260191200869603541199134685575914499544","179620615078563884781902893605375466367","278164691566707480649065715404930467371","36081824621816115910608309360897014137","42900917647750887022810398972196581041","332560534686736885083641254934972921636","264667847414507440218467159069631227943","129248930795625459809592491012589415049","308246753866093347786776410573203516681","45558507796006482349715769942577746294","162919397143614619017450063426126539099","251179050228986401801776194352960803413","93471628048581959705305943981795538167"],"threshold":0.9},"id":"CVE-2023-25158-1d4dabd7","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"},{"deprecated":false,"digest":{"line_hashes":["294787456276596766808350279041101325125","291035696945111903181528842260852183451","321124147455889041630393448708968668660","113399573075597836001193508952553998482"],"threshold":0.9},"id":"CVE-2023-25158-1dd7ffaa","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-mysql/src/main/java/org/geotools/data/mysql/MySQLDialectBasic.java"}},{"deprecated":false,"digest":{"function_hash":"118223653516967682305786029680819338656","length":395},"id":"CVE-2023-25158-25d1fa92","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java","function":"testFunctionJsonArrayContains"}},{"target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISPSDialect.java","function":"createPreparedFilterToSQL"},"deprecated":false,"digest":{"function_hash":"220813096194424391700960108943160929280","length":203},"id":"CVE-2023-25158-28a4b777","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/main/java/org/geotools/jdbc/EscapeSql.java"},"deprecated":false,"digest":{"line_hashes":["45592682516099818026400648294011093025","309472777026591230381284736588568271791"],"threshold":0.9},"id":"CVE-2023-25158-366a6394","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISPSDialect.java"},"deprecated":false,"digest":{"line_hashes":["37079777887409376026710954859193810747","103348101819502951818653702807898621441","317688671493921487045752116880146431264","317928379051802528984731054667385503696"],"threshold":0.9},"id":"CVE-2023-25158-3c77ea0c"},{"target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostgisNGDataStoreFactory.java","function":"createDataStoreInternal"},"deprecated":false,"digest":{"function_hash":"157517197646415184807539817683662209829","length":1222},"id":"CVE-2023-25158-3cd171c3","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/main/src/test/java/org/geotools/filter/FilterTest.java"},"deprecated":false,"digest":{"line_hashes":["213533777429961786192154772047706025840","302325195158184453792414783484846373641","169559134747148105061653202760069507984","211369691695727035920500847761808792035","223154208987578852728241872356331031735","74259187588604117577553404993536056134","28021656071706031537941375708683574423","221321092520255005807422544417750766839","280078618400578543213810516721990141861","232108566013218324402689528120440212999","304615819830661571071472994549682069164","207744349641059350540338497414449106735","138624953557820694444338183746058116763","306374115522656249227889424247573286198","249366089040338745927532783990518602419","24305323051540598904321347028774067890","32624428907814648354946367782260507137","22627217787622228255704080522878080387","127309307286885544369735863240119835569","26495480557130829658134448136448567126","205333172285291298544276663767216447432","133550336524511669469656566652497375168","263537296096262323195666071196880146048"],"threshold":0.9},"id":"CVE-2023-25158-3f5dbdfd"},{"digest":{"line_hashes":["122513856677672411334650392461749611338","312584303462007626372315890583314868854","170554242962011026266276828908723863318","37649702196132032315093260135102390559","338831411656918445312477385422703139539","49972093140278392010608676034629952280","105828075245556932948891942474446373357","114289740701550195401261201924945737542","120008270131064367234121482424787439963","3609364239062242235350138308150371249","190830151009323644920844724537734750341","197725753723151900111426170008981348992","150923991056115470122543519179863155925","255922016272387090173839799182719438786","63587758975116825346920056673380297045"],"threshold":0.9},"id":"CVE-2023-25158-49ce783d","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java"},"deprecated":false,"digest":{"line_hashes":["250193442859626900160711613258167731999","131711539857755822702926745190355272178","172366429476887660155288187973783616316","326201030866756358465483866883259507233","10254011327543598439242198623955238773","305096352363416503657195272620769543418","30590340844502562931760189336078788013","159449430853369492169958664062437321346","218013756706493927737027481690291101370","215082960664304062000295733110104195795","209717142029933437107622212188368567121","165588918023850290422503831337063144105","7042588577064085306460567787108486795"],"threshold":0.9},"id":"CVE-2023-25158-5083108b"},{"deprecated":false,"digest":{"function_hash":"277614577333743597387872458711341054301","length":811},"id":"CVE-2023-25158-514f07bf","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java","function":"visit"}},{"deprecated":false,"digest":{"line_hashes":["66242875419099917018887323438309443264","157674059825600171380738145473912188913","309761892918326961227907454189485331824","125548897867696237756862658475995389524","249087331863142555120273573228290579734","150661630902959952988848857115122372289","141321279039899891908352568147075033129","64813762095434644241217683237294006581","22517200136085374198021577484570126703","20475733851611150513900424606032641049","291429505672163383402793713219878925648","281673635677281708799189127392871445295","284306693277290237872661573753215562951","200522610357213631230514655336094616639","202823694100712904753840857060361505872","232539664073740295521205860770043539846","229247849294654740637822864819042636868","284579863608561822034734233975271348658","196765351879957556725085908072121917131","304610827366418040603648604039727772802","162889843528056224250033870649563685034","338216004461903092598947168044881713063","213001520091228361913014131130291571477","32315408883360492128875083549593543528","145275309553430424361262439838976355305","210569504960276494837419725136208088404","174307502841470163931952990696790832955","214445348945199014867538431570466899805","109010699703243864484630657741133592621","4057964933576567794632598657131662060","316485900459877278909920655220798506091","310256233510215912915927303971322121874","148265627095694383778584809409624513784","292388696449717148903956424990509720229","111716336207239903726976093589973137074","322515878083090783230139476774339204439","146327613512349280004084994546159807350"],"threshold":0.9},"id":"CVE-2023-25158-5d91c582","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java"}},{"deprecated":false,"digest":{"length":616,"function_hash":"140166956115231745631658360358583786471"},"id":"CVE-2023-25158-66e9f9dd","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java","function":"doSDODistance"}},{"digest":{"function_hash":"207256628840053327237408572913325126961","length":1082},"id":"CVE-2023-25158-69596e17","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleDialect.java","function":"unwrapConnection"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["72297846146421574481496836379141415314","191559276605633156134404134679846034143","16942317334204852754325244857261407101","273875195079675792100257593556611631599","312222944726134249437984087099000950842","21423474555066674649457512592904673779","249144092793239838724822199864042101578"],"threshold":0.9},"id":"CVE-2023-25158-6fd38c83","signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostgisNGDataStoreFactory.java"}},{"signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/test/java/org/geotools/data/oracle/OracleFilterToSqlTest.java"},"deprecated":false,"digest":{"line_hashes":["214296553943220521808960117177924670506","190374290175640033792646409884664618702","119349991324144044727828951718233284248","243485828038804406559355342681429233345","214275168984843250585860006010124583372","238398715341854547583619692223966622327"],"threshold":0.9},"id":"CVE-2023-25158-7770a86f","signature_type":"Line"},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java","function":"createFilterToSQL"},"deprecated":false,"digest":{"function_hash":"255987811724664614532961537162091800073","length":199},"id":"CVE-2023-25158-84b04209","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-mysql/src/main/java/org/geotools/data/mysql/MySQLDialectBasic.java","function":"createFilterToSQL"},"deprecated":false,"digest":{"function_hash":"53311857982718914455302630709132681632","length":72},"id":"CVE-2023-25158-85a17533","signature_type":"Function"},{"digest":{"length":125,"function_hash":"116649229414234232651017910025066836415"},"id":"CVE-2023-25158-8e6ded47","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"function":"initializeConnection","file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"134959298950713195793596911989783540268","length":385},"id":"CVE-2023-25158-9b034f95","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java","function":"testFunctionJsonArrayContainsNumber"}},{"id":"CVE-2023-25158-aac5d82e","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java","function":"visitFunction"},"deprecated":false,"digest":{"function_hash":"144269811836907875332100735547197287993","length":3994}},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/main/src/main/java/org/geotools/filter/LikeFilterImpl.java","function":"convertToSQL92"},"deprecated":false,"digest":{"function_hash":"39083436095240866762164342210953008350","length":816},"id":"CVE-2023-25158-b16221f6","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-oracle/src/main/java/org/geotools/data/oracle/OracleFilterToSQL.java","function":"jsonExists"},"deprecated":false,"digest":{"function_hash":"133396524232645826726273332076258483130","length":528},"id":"CVE-2023-25158-c77db7f8"},{"target":{"file":"modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java","function":"writeLiteral"},"deprecated":false,"digest":{"function_hash":"260736272320050501553402867692262760537","length":1154},"id":"CVE-2023-25158-d748c55e","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b"},{"id":"CVE-2023-25158-e5c6ec34","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/test/java/org/geotools/data/postgis/PostgisFilterToSQLTest.java","function":"testNestedObjectJsonArrayContains"},"deprecated":false,"digest":{"function_hash":"259975987087269551836184379062022956393","length":424}},{"id":"CVE-2023-25158-e852eb45","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"function":"testLikeToSQL","file":"modules/library/main/src/test/java/org/geotools/filter/FilterTest.java"},"deprecated":false,"digest":{"function_hash":"236502600874157471185706150807419487732","length":1075}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/PostGISDialect.java"},"deprecated":false,"digest":{"line_hashes":["222454627702680702682845701839126349920","59027227462534466173861963123874621529","52652565738458779537781330061124064994","66587722525295754864709179574783836826","150278209868464411204428547093910257028","237291601142665080007087172337628620341","21280653224431699596041115136957881514","281961777336031681475238207660986987417","253387214538982898391371728674188956158","334889276827123027609307925964264699995","272459854927083321554644654769916414804","53090156315542670703890201977929262650","254456658038048635928383745249987460194","51272451310764072278475496806019086216","59960082426216273108337376778049753614","330975800771394318936122819896503674099","116040847827667456699492274004839669617","44545771298509130492197775852368070613","53285074984208797262569096177611870168","96151127212768516625060940126624168767","222692814623059433698594412904365840699"],"threshold":0.9},"id":"CVE-2023-25158-ef4a6901"},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/main/java/org/geotools/jdbc/SQLDialect.java"},"deprecated":false,"digest":{"line_hashes":["271967369994686088946604060839258486583","143757807308064673322500719707567194891","81421073752167631253584337735588724142","96777492195815811987895310964170001917","50789613121202626185240961735537968974","128161857889695842374406216299345787594","26722019151327519011564762977212000999","233362593998452079004141544861169285506","274652551076053773234829309858608238554","279247886364267234292723348574914419547","215370038324843817588848741358192576633","161346880260006977017839165489523242600","101856513671138508746978283917223732549"],"threshold":0.9},"id":"CVE-2023-25158-f2969d40","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/plugin/jdbc/jdbc-postgis/src/main/java/org/geotools/data/postgis/FilterToSqlHelper.java","function":"buildJsonFromStrPointer"},"deprecated":false,"digest":{"function_hash":"178665877321501138853807120304758727714","length":617},"id":"CVE-2023-25158-f60d88aa","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2023-25158-f7ba293c","signature_type":"Function","signature_version":"v1","source":"https://github.com/geotools/geotools/commit/64fb4c47f43ca818c2fe96a94651bff1b3b3ed2b","target":{"file":"modules/library/jdbc/src/main/java/org/geotools/data/jdbc/FilterToSQL.java","function":"visit"},"deprecated":false,"digest":{"function_hash":"328791648793822088139607993564037432773","length":1249}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}