{"id":"CVE-2023-32070","summary":"Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers","details":"XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.","aliases":["GHSA-6gf5-c898-7rxp"],"modified":"2026-07-15T19:06:42.492840Z","published":"2023-05-10T17:18:06.949Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-83"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32070.json","unresolved_ranges":[{"extracted_events":[{"last_affected":"3.0-milestone-2"}],"source":"AFFECTED_FIELD"}]},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XRENDERING-663"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32070.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-rendering/security/advisories/GHSA-6gf5-c898-7rxp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32070"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"0"},{"last_affected":"bae1e23e73cafc007e5f28b39a04bfa0acf0199c"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"14.5"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"0"},{"last_affected":"ab4dfeaeef13360eebcaa507bc652073aa89a427"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"14.5"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-rendering","events":[{"introduced":"0"},{"fixed":"c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"14.6-rc-1"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["xwiki-commons-14.5","xwiki-commons-8.3-milestone-2","xwiki-commons-8.3-milestone-1","xwiki-commons-8.2-milestone-2","xwiki-commons-8.2-milestone-1","xwiki-commons-8.1-milestone-2","xwiki-commons-8.1-milestone-1","xwiki-commons-8.0-milestone-2","xwiki-commons-8.0-milestone-1","xwiki-platform-14.5","xwiki-platform-9.9-rc-2","xwiki-platform-8.3-milestone-1","xwiki-platform-8.2-milestone-2","xwiki-platform-8.2-milestone-1","xwiki-platform-8.1-milestone-2","xwiki-platform-8.1-milestone-1","xwiki-platform-8.0-milestone-2","xwiki-platform-8.0-milestone-1","xwiki-platform-7.4-milestone-2","xwiki-platform-7.4-milestone-1","xwiki-platform-7.3-milestone-2","xwiki-rendering-8.3-milestone-2","xwiki-rendering-8.3-milestone-1","xwiki-rendering-8.2-milestone-2","xwiki-rendering-8.2-milestone-1","xwiki-rendering-8.1-milestone-2","xwiki-rendering-8.1-milestone-1","xwiki-rendering-8.0-milestone-2","xwiki-rendering-8.0-milestone-1","xwiki-rendering-7.4-milestone-2","xwiki-rendering-7.4-milestone-1","xwiki-rendering-7.3-milestone-2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-32070.json","vanir_signatures_modified":"2026-07-15T19:06:42Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["154828115548765365161902567291575442901","108070525728773619609725231191986250142","295417398656432027074505962809342470122","114271328025694609730477140409452835938","185208573291804125337811289076837311422","213421344692524411795022935678393547037","116434144550924676200233966346613049790","252692999035374326627433331221885030644","304441004980555067101477729045456807008","190534872091575447951155765875492874457"],"threshold":0.9},"id":"CVE-2023-32070-00ad0a66","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedxhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/AnnotatedXHTMLRenderer.java"}},{"digest":{"function_hash":"155548188197774209272073618083528625800","length":100},"id":"CVE-2023-32070-047792d2","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLElement"},"deprecated":false},{"id":"CVE-2023-32070-095cd3a8","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/annotatedxhtml/HTMLMacroAnnotatedXHTMLRenderer.java"},"deprecated":false,"digest":{"line_hashes":["121103651231322835315916464985642395570","327355702511932071453806562648091305182","79618922044996025770513580704924938528","141381613066667943840476501767592146582","185208573291804125337811289076837311422","133762935364647213451527919088427444546","339558141279684842734729304399996702674","287485463537181916704888426489574622996","181926032139406923945619867560618538884","84468647111004470446453816476824835327"],"threshold":0.9}},{"id":"CVE-2023-32070-0fa239d5","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/main/java/org/xwiki/rendering/internal/renderer/html5/HTML5ChainingRenderer.java"},"deprecated":false,"digest":{"line_hashes":["163920942714143787887360168892795030436","180356219920957305883202892335704475865","51819639747823291687467176603316927940","209830704878055766508202465121993436054","303468424881999037551309268309773937792","251541314448368725073581392442366047987","53585093735479783330526147395263798716","34880021107478229568573679089006193108","102803639745608393015840725481470515247","124250490205311240100457710847140425135","272882265698050482851905504795024087068","130153624699025627710416302960923530367","256254152477827679509138426843643536908","240467183948344850350244162153131619620","8189533995674114563084417571320591461","138174043865713878324918454160689395703","292217217273601883610969356486842444963","329322626990319480637364759331407215069","308905687105530544833316695538645077182"],"threshold":0.9}},{"digest":{"function_hash":"155548188197774209272073618083528625800","length":100},"id":"CVE-2023-32070-11a93e04","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLStartElement"},"deprecated":false},{"id":"CVE-2023-32070-11e085d7","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/main/java/org/xwiki/rendering/internal/renderer/html5/HTML5ChainingRenderer.java","function":"HTML5ChainingRenderer"},"deprecated":false,"digest":{"function_hash":"20712446925385009035174374967041199677","length":90}},{"id":"CVE-2023-32070-1d106144","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/HTMLMacroXHTMLRenderer.java"},"deprecated":false,"digest":{"line_hashes":["202644514840282927163073108930743093615","327355702511932071453806562648091305182","175342369655801774809900418667053872340","172172047021802107907534888975308637202","300876308279292386444507954389313802523","298235346434787322338904269311669193078","339558141279684842734729304399996702674","161939433044651186477939705992587896848","146455836187463603547280429664735995039","31800784892092087166780213821622752445"],"threshold":0.9}},{"digest":{"line_hashes":["302649485660587959897145486888247843200","327355702511932071453806562648091305182","94942010460014574897376629146224326565","290324072369592141640126225992247611663","300876308279292386444507954389313802523","298235346434787322338904269311669193078","339558141279684842734729304399996702674","330210360185490226679910428041940794988","229633992019782075887390619808535662559","165191067517114799903220078221864787226"],"threshold":0.9},"id":"CVE-2023-32070-2164d187","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/html5/HTMLMacroHTML5Renderer.java"},"deprecated":false},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["19356841829319032740058978252107896614","246021881564232865712539970937251889621","169455174213588762036359848428960837395","243509061283430382612916468175462969060","51750060028604599540345616285760626191","74626605466215702872875436655144019995","169455174213588762036359848428960837395","296036650323419820370092623867187109613"]},"id":"CVE-2023-32070-2ad79fd8","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/test/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRendererTest.java"}},{"digest":{"function_hash":"44236740029388112220984182498768102268","length":78},"id":"CVE-2023-32070-36414350","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLStartElement"},"deprecated":false},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"function":"initialize","file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedxhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/AnnotatedXHTMLRenderer.java"},"deprecated":false,"digest":{"function_hash":"235152963008905790459933882148048697667","length":339},"id":"CVE-2023-32070-3f6d5fdf","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2023-32070-62e0cb64","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedxhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/AnnotatedXHTMLChainingRenderer.java"},"deprecated":false,"digest":{"line_hashes":["4794190798777549121196309110493131917","100359519953187559742443472328684536590","247038169768854396090010069849429256296","193845314461621464634281118692226732547","328849539267266185346166997515359423495","302491771007176754830895163696945446694","329459229205250051196413582766116264611","211178662484601292632828743132189843722","223565393937243679820266182560212637720","12771157529701363172956148932315832889","277836876960668204710822025783796891518"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["154828115548765365161902567291575442901","108070525728773619609725231191986250142","180870355733691414397097598616165597856","61692191750940257276805950558182454484","185208573291804125337811289076837311422","213421344692524411795022935678393547037","116434144550924676200233966346613049790","17624574437465086590886034843980908591","263256414237604881756765504977177418850","239477482614176566979857612242136881918"],"threshold":0.9},"id":"CVE-2023-32070-6377de51","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedhtml5/src/main/java/org/xwiki/rendering/internal/renderer/html5/AnnotatedHTML5Renderer.java"}},{"deprecated":false,"digest":{"line_hashes":["84402554713483474583118219455865139931","90368717587795018883362276140379654894","189649879956218170784844931503375826448","203520105591837775322491854915745274386","88547279922081702955377227915443915102","332062121096603928155474385307878330401","260632098041071570950792791104408355935","154722970610289340668041950028360807071","223565393937243679820266182560212637720","12771157529701363172956148932315832889","277836876960668204710822025783796891518"],"threshold":0.9},"id":"CVE-2023-32070-64e8c146","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedhtml5/src/main/java/org/xwiki/rendering/internal/renderer/html5/AnnotatedHTML5ChainingRenderer.java"}},{"id":"CVE-2023-32070-67aa72e0","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedhtml5/src/main/java/org/xwiki/rendering/internal/renderer/html5/AnnotatedHTML5Renderer.java","function":"initialize"},"deprecated":false,"digest":{"function_hash":"235152963008905790459933882148048697667","length":339}},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRenderer.java","function":"XHTMLChainingRenderer"},"deprecated":false,"digest":{"function_hash":"85116525925620415914419718642943009706","length":123},"id":"CVE-2023-32070-6a543f51","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2023-32070-6e27fa78","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/annotatedxhtml/HTMLMacroAnnotatedXHTMLRenderer.java","function":"getSyntaxRenderer"},"deprecated":false,"digest":{"function_hash":"337315920175947319628086807453284104780","length":106}},{"target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLRenderer.java"},"deprecated":false,"digest":{"line_hashes":["154828115548765365161902567291575442901","108070525728773619609725231191986250142","6956284583572159707612591906649706902","96316615565152950057103483241097095406","300876308279292386444507954389313802523","53615571014861357879187855877409243372","116434144550924676200233966346613049790","315251202934672096962719121842851579886","145678257763807628815399934970762290388","153571561571645310958238315194665983491"],"threshold":0.9},"id":"CVE-2023-32070-703b562e","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedxhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/AnnotatedXHTMLChainingRenderer.java","function":"AnnotatedXHTMLChainingRenderer"},"deprecated":false,"digest":{"function_hash":"279819492113887327494792082826096468932","length":177},"id":"CVE-2023-32070-718cd4a6","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["154828115548765365161902567291575442901","108070525728773619609725231191986250142","261665921814310684997351216099694721335","308178075159001775679025461348807526377","300876308279292386444507954389313802523","53615571014861357879187855877409243372","116434144550924676200233966346613049790","204282891732123523164665694013114687278","33457863125882862382550735769873580784","35907768672978288231167148656791156440"],"threshold":0.9},"id":"CVE-2023-32070-72898c12","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/main/java/org/xwiki/rendering/internal/renderer/html5/HTML5Renderer.java"},"deprecated":false},{"target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/annotatedhtml5/HTMLMacroAnnotatedHTML5Renderer.java"},"deprecated":false,"digest":{"line_hashes":["126789004492992081047985934044136919493","327355702511932071453806562648091305182","220362951583398794252852895736028130315","165409057145055584909006601842655218950","300876308279292386444507954389313802523","298235346434787322338904269311669193078","339558141279684842734729304399996702674","200343816010187779322371622811376261038","186272376267404535494362957046325863224","138444330968935204431455665717772658114"],"threshold":0.9},"id":"CVE-2023-32070-7ab53c1c","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"},{"id":"CVE-2023-32070-8a890b6e","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/test/java/org/xwiki/rendering/internal/html5/HTML5ChainingRendererTest.java","function":"setUp"},"deprecated":false,"digest":{"length":317,"function_hash":"174581599444970474400905479480449230137"}},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLStartElement"},"deprecated":false,"digest":{"function_hash":"155548188197774209272073618083528625800","length":100},"id":"CVE-2023-32070-8b766920","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRenderer.java","function":"getXHTMLWikiPrinter"},"deprecated":false,"digest":{"length":153,"function_hash":"325273727812377667214668686484362320201"},"id":"CVE-2023-32070-91d8d527"},{"digest":{"function_hash":"155548188197774209272073618083528625800","length":100},"id":"CVE-2023-32070-988e6e63","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLElement"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"337315920175947319628086807453284104780","length":106},"id":"CVE-2023-32070-9b150adf","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/HTMLMacroXHTMLRenderer.java","function":"getSyntaxRenderer"}},{"target":{"file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/annotatedhtml5/HTMLMacroAnnotatedHTML5Renderer.java","function":"getSyntaxRenderer"},"deprecated":false,"digest":{"function_hash":"337315920175947319628086807453284104780","length":106},"id":"CVE-2023-32070-9ebc2a4a","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"},{"deprecated":false,"digest":{"line_hashes":["12435163603624478805704002636423363879","202038698014319664328431391675550839505","156027888035408944627657099362316617068","178718827685203665955689387273599914185","278954727505366282395593991700905094549","273816346772838141260080787105772190192","49776205134214988468886561169662597270","298560972568126341862888285649044133797","246721540405615020438653782548205200337","15370205784446044983574519763566399042","26087377830240147827537412204559649650","185364578378775000946416276467410689732","272011146990772873472404077167128207614","1390395053689355488570925776056597790"],"threshold":0.9},"id":"CVE-2023-32070-a719ce91","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/parser/xhtml/wikimodel/XHTMLXWikiGeneratorListener.java"}},{"deprecated":false,"digest":{"function_hash":"337315920175947319628086807453284104780","length":106},"id":"CVE-2023-32070-aefb4859","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"function":"getSyntaxRenderer","file":"xwiki-rendering-macros/xwiki-rendering-macro-html/src/main/java/org/xwiki/rendering/internal/macro/html/renderers/html5/HTMLMacroHTML5Renderer.java"}},{"deprecated":false,"digest":{"function_hash":"277406719726075960865762265498151588798","length":595},"id":"CVE-2023-32070-b053d991","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/test/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRendererTest.java","function":"onRawText"}},{"deprecated":false,"digest":{"function_hash":"57215052104951786030494572682334675156","length":342},"id":"CVE-2023-32070-b3e67911","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/test/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRendererTest.java","function":"outputFigureCaptionEvents"}},{"deprecated":false,"digest":{"function_hash":"130125106617966105419526299896715063383","length":428},"id":"CVE-2023-32070-b7dea89d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/main/java/org/xwiki/rendering/internal/renderer/html5/HTML5ChainingRenderer.java","function":"beginFormat"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-annotatedhtml5/src/main/java/org/xwiki/rendering/internal/renderer/html5/AnnotatedHTML5ChainingRenderer.java","function":"AnnotatedHTML5ChainingRenderer"},"deprecated":false,"digest":{"function_hash":"279819492113887327494792082826096468932","length":177},"id":"CVE-2023-32070-bffc001d"},{"deprecated":false,"digest":{"line_hashes":["290680128372610548912325640035835543499","202782297694841838420761892436453963137","338600514465237509422969485630327678625","129859819207807317268391283224833295458","47625213623917844465653649987482173121","59217873732197745909604878628300640704","41463553900274424374110336061091673408","116590137443071116630186854225964866203","261067654641939299690122248070973298107","33502234350512021756197383609998973090","274649195265659898126881354516056065968"],"threshold":0.9},"id":"CVE-2023-32070-db1bd240","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/test/java/org/xwiki/rendering/internal/html5/HTML5ChainingRendererTest.java"}},{"digest":{"line_hashes":["210246161935155466341215935997231698025","310503740728290173276043430436239676709","235207976023201056216073606923683067034","159978871006974734942112522924799211514","281850499132955475557544088096858176806","106489293891253155640942346108898246598","84086446697585221951662610808103600264","70448964077690453377190673817437639913","336485619767616888491093474147864727237","69591035335330234535066935445072968483","280462147319574997336342250036593155210","94228450342581691637282623891145851418","180987749586444627899131127632936297782","326444373579502908775761437239374274104","163874980342881082797768189809594992682","237786855205135029863638250987945580690","102385653768273907955146443083122453939","267366964279779417012438227232826405616","97057114111360797768203137968755365217","205857242550576086511835166286388527712","73947395839881825627493251114059159911"],"threshold":0.9},"id":"CVE-2023-32070-dbe98841","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLChainingRenderer.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["182383326804242132765612953838602816517","288761100123471130183168713334605211168","236732032902832111491710631695912644721","235137082971124269778431854578046210094","23496989370587958063274443604450933721","55126064533790544008635892865259321416","273330390424293939769495703267977736376","107768379250691376905772089411481608171","333087179689804744905901572853011988006","41386776214919788094142796480950924273","102038906973653866246530566229982280239","291992511514730328857312854692771148219","32311532965328546675845763945286152248","46743136803900552521385109462422558197","85896228812565952656528095802242372663","83204693269885562861058831017542975548","194510091752362722892517124978133184792","192098600716745376745016263787758201459","3246878110608604114936172766873073269","306735947727790403728544828480279125205","249127872558050390296167056147248423980","156026336074498360039888992871741512831","12491719616632846523008770938363743536","146634417306364838120963823418976988257","138289251229675597348068167242312434454","337956342641026699603913960492163950329","317558274102467704567596236823842745734","156026336074498360039888992871741512831","12491719616632846523008770938363743536","162710086336012644240689719536549045190","93208220608614464816392419917469946638","210651056186276064888967654579602149645","197580302529432041619137997283224044969","2733431346105941857050797970194600592","61903446201040485868560600537648528506","139159712548797211720570931409487978699","121774313815490251292270656974512420554","157126410522554124742148244354170481893","160505130994739666161014884837348344566","211219689097648667907059687555469632006","182117994511662375509915987454217620337","68422499214402411950149697441280878442","56626583737850650075443518808392186064","310345595673858254349698158911779686359","82196840447741427313393014150473453857","211219689097648667907059687555469632006","182117994511662375509915987454217620337","326500121241839057292172680660740983363","194768806730313107652666879138481122593","308500799035865204973084591677327365993","86932167439004222995797906007842142828","211219689097648667907059687555469632006","182117994511662375509915987454217620337","97045865197325012873390739066369308436","1885102023900279404922791330296068112","12429303634893235116780656288503279781","35559680661595591267112105963019930935","134050530650475263142416443343779420421","192988678771955321252242680460644628526","242749213864668052496759319984462483864","262124984574474180150803901905031519268","268821804204002503060094710546475290309","22963722038057280784021315231469547113","321975328776679819857474339151693672744"]},"id":"CVE-2023-32070-dc155996","signature_type":"Line"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"XHTMLWikiPrinter"},"deprecated":false,"digest":{"function_hash":"235811019879431439277195957215880491234","length":46},"id":"CVE-2023-32070-e10a7563"},{"id":"CVE-2023-32070-f433b4a7","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-xhtml/src/main/java/org/xwiki/rendering/internal/renderer/xhtml/XHTMLRenderer.java","function":"initialize"},"deprecated":false,"digest":{"function_hash":"235152963008905790459933882148048697667","length":339}},{"target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLElement"},"deprecated":false,"digest":{"function_hash":"44236740029388112220984182498768102268","length":78},"id":"CVE-2023-32070-f80985bb","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1"},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-syntaxes/xwiki-rendering-syntax-html5/src/main/java/org/xwiki/rendering/internal/renderer/html5/HTML5Renderer.java","function":"initialize"},"deprecated":false,"digest":{"function_hash":"235152963008905790459933882148048697667","length":339},"id":"CVE-2023-32070-fa4c428f","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/xwiki/xwiki-rendering/commit/c40e2f5f9482ec6c3e71dbf1fff5ba8a5e44cdc1","target":{"file":"xwiki-rendering-xml/src/main/java/org/xwiki/rendering/renderer/printer/XHTMLWikiPrinter.java","function":"printXMLStartElement"},"deprecated":false,"digest":{"function_hash":"155548188197774209272073618083528625800","length":100},"id":"CVE-2023-32070-fbc949ab","signature_type":"Function","signature_version":"v1"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"}]}