{"id":"CVE-2023-36468","summary":"Upgrading doesn't prevent exploiting vulnerable XWiki documents","details":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and that upgrade contains a fix for a bug in a document, just a new version of that document is added. In some cases, it's still possible to exploit the vulnerability that was fixed in the new version. The severity of this depends on the fixed vulnerability, for the purpose of this advisory take CVE-2022-36100/GHSA-2g5c-228j-p52x as example - it is easily exploitable with just view rights and critical. When XWiki is upgraded from a version before the fix for it (e.g., 14.3) to a version including the fix (e.g., 14.4), the vulnerability can still be reproduced by adding `rev=1.1` to the URL used in the reproduction steps so remote code execution is possible even after upgrading. Therefore, this affects the confidentiality, integrity and availability of the whole XWiki installation. This vulnerability also affects manually added script macros that contained security vulnerabilities that were later fixed by changing the script macro without deleting the versions with the security vulnerability from the history. This vulnerability doesn't affect freshly installed versions of XWiki. Further, this vulnerability doesn't affect content that is only loaded from the current version of a document like the code of wiki macros or UI extensions. This vulnerability has been patched in XWiki 14.10.7 and 15.2RC1 by forcing old revisions to be executed in a restricted mode that disables all script macros. As a workaround, admins can manually delete old revisions of affected documents. A script could be used to identify all installed documents and delete the history for them. However, also manually added and later corrected code may be affected by this vulnerability so it is easy to miss documents.","aliases":["GHSA-8q9q-r9v2-644m"],"modified":"2026-08-12T14:51:07.087547Z","published":"2023-06-29T20:44:33.894Z","related":["GHSA-2g5c-228j-p52x","GHSA-8q9q-r9v2-644m"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-459"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36468.json"},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XWIKI-20594"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36468.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-2g5c-228j-p52x"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-8q9q-r9v2-644m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36468"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"0"},{"fixed":"1e168fcaa5e247cbb1c03ee66e5cffbcd36e3d71"},{"introduced":"fdba4ca1398766e912f7888af5bdefbeef60d8b0"},{"last_affected":"6bd6f86d16eac5bcf20abe718916136eeafdda44"}],"database_specific":{"extracted_events":[{"introduced":"2.0"},{"fixed":"14.10.7"},{"introduced":"15.0-NA"},{"last_affected":"15.0-NA"},{"introduced":"15.1-NA"},{"last_affected":"15.1-NA"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:15.0:-:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:15.1:-:*:*:*:*:*:*"]}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"dc60d59d97e8f693b03e7c36d4a443bc7423b1fb"},{"fixed":"e6857070533992f14bb81691dcdf4c315792656d"},{"introduced":"96b4a230ee41ef74268c9720722f6473c705583d"},{"fixed":"15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"}],"database_specific":{"cpe":["cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:15.0:-:*:*:*:*:*:*","cpe:2.3:a:xwiki:xwiki:15.1:-:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0"},{"fixed":"14.10.7"},{"introduced":"15.0-NA"},{"last_affected":"15.0-NA"},{"introduced":"15.1-NA"},{"last_affected":"15.1-NA"}],"source":["CPE_RANGE","CPE_STRING","REFERENCES"]}}],"versions":["15.0-NA","15.1-NA","xwiki-commons-14.10.6","xwiki-commons-15.1","xwiki-commons-15.1-rc-1","xwiki-commons-14.10.5","xwiki-commons-14.10.4","xwiki-commons-14.10.3","xwiki-commons-14.10.2","xwiki-commons-14.10.1","xwiki-commons-14.10","xwiki-commons-8.3-milestone-2","xwiki-commons-8.3-milestone-1","xwiki-commons-8.2-milestone-2","xwiki-commons-8.2-milestone-1","xwiki-commons-8.1-milestone-2","xwiki-commons-8.1-milestone-1","xwiki-commons-8.0-milestone-2","xwiki-commons-8.0-milestone-1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36468.json","vanir_signatures_modified":"2026-08-12T14:51:07Z","vanir_signatures":[{"digest":{"function_hash":"123012931957901159386271635118730394561","length":1026},"id":"CVE-2023-36468-0cf820ea","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java","function":"getRenderedContent"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"160160405259003427041546713035700682364","length":822},"id":"CVE-2023-36468-19722334","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/test/MockitoOldcore.java","function":"answer"}},{"deprecated":false,"digest":{"length":4477,"function_hash":"151014050922768051271738333600267760967"},"id":"CVE-2023-36468-2907eb4b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/filter/output/XWikiDocumentOutputFilterStream.java","function":"begin"}},{"deprecated":false,"digest":{"function_hash":"117241191672380593009985700614781731748","length":1189},"id":"CVE-2023-36468-2b5ec310","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-context/src/main/java/org/xwiki/rendering/internal/macro/context/ContextMacro.java","function":"executeContext"}},{"deprecated":false,"digest":{"line_hashes":["165737047896731952591398740596868003632","248014628566761961243329128864477175214","107645638728231906552752595657925241392"],"threshold":0.9},"id":"CVE-2023-36468-2e58b632","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/api/Document.java"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/test/MockitoOldcore.java"},"deprecated":false,"digest":{"line_hashes":["11186618680130022251980422728865612442","65907785793517837661353248417764002133","105831440734466122416451715014159428878","306724115626649495128444289630786633177","196795410936597505302558500361778139839","275845168785873056895209741585512318610","268354502149529704196109862417252577509","30977339825979467352738837975970283099"],"threshold":0.9},"id":"CVE-2023-36468-3c273358","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"},{"digest":{"line_hashes":["94892792786231280984718675826325073515","179339668203633926153193056498787101462","183748276706536368215438840943880886424","276215921080780793884252793510886323487","285422989589527322863362068750325184759"],"threshold":0.9},"id":"CVE-2023-36468-488eb937","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/RecycleBinIT.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentTitleDisplayer.java"},"deprecated":false,"digest":{"line_hashes":["264033683949429958800248074546841419118","99214792101255290593708541505497686794","51368960850079307955713530240571866060","178140707997132195414451695380465038969"],"threshold":0.9},"id":"CVE-2023-36468-4a9a2649"},{"digest":{"line_hashes":["14913540256693838124276903845482110695","1435913143264401242258382326293251213","110548084207104606058080189277065059399","276349689069635117358273449202005620912","35516421483644163020434596869187394470","30769152403540310851951493676757340662","240522512309630831697827857464120036961","63023319149774050960125992398873200987"],"threshold":0.9},"id":"CVE-2023-36468-4c186b96","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authorization/xwiki-platform-security-authorization-bridge/src/main/java/org/xwiki/security/authorization/internal/DefaultContextualAuthorizationManager.java"},"deprecated":false},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/XWikiHibernateStore.java"},"deprecated":false,"digest":{"line_hashes":["127518713872964714802278020136239747598","119207925645227317550712105014139004505","259358982507095914919428925950779984718"],"threshold":0.9},"id":"CVE-2023-36468-67137ffb","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"},{"id":"CVE-2023-36468-706fce27","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/AbstractDocumentTitleDisplayer.java"},"deprecated":false,"digest":{"line_hashes":["201865577717211840354522732862000537402","43542091896794845018013848747321993927","140162269514413428415046327979006228776","283019178147221685204611140051562789104","286270939858214743620493049641482022089"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentContentAsyncRenderer.java","function":"initialize"},"deprecated":false,"digest":{"length":918,"function_hash":"295596264533320453860739946061908717748"},"id":"CVE-2023-36468-7103dfda","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"function":"checkPreAccess","file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authorization/xwiki-platform-security-authorization-bridge/src/main/java/org/xwiki/security/authorization/internal/DefaultContextualAuthorizationManager.java"},"deprecated":false,"digest":{"function_hash":"62952301933468740369651235739760097267","length":280},"id":"CVE-2023-36468-728cfc06","signature_type":"Function"},{"source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/XWikiDocumentMockitoTest.java"},"deprecated":false,"digest":{"line_hashes":["98859517435743364604389940719898379134","292995809288970061146827229169371738089","100817951561585181024589711520071096629","291515602658615450373614294877940481375"],"threshold":0.9},"id":"CVE-2023-36468-98cbd5be","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2023-36468-a7261562","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/store/XWikiHibernateStore.java","function":"saveXWikiDoc"},"deprecated":false,"digest":{"function_hash":"5882623875748102129255585023819243860","length":4260}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-rendering/xwiki-platform-rendering-macros/xwiki-platform-rendering-macro-context/src/main/java/org/xwiki/rendering/internal/macro/context/ContextMacro.java"},"deprecated":false,"digest":{"line_hashes":["130401822725851137789320397473894985301","34725046770161046334137969647694087249","287864767733029756660913459356284239010","212578078603152020452648298043414739061"],"threshold":0.9},"id":"CVE-2023-36468-ace13fb4","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"201941822821309377611161590380513883914","length":863},"id":"CVE-2023-36468-af586a7d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentTitleDisplayer.java","function":"extractTitleFromContent"}},{"id":"CVE-2023-36468-b6cc7983","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/test/MockitoOldcore.java","function":"answer"},"deprecated":false,"digest":{"length":1599,"function_hash":"24155242699483066131350945147188805907"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-bridge/src/main/java/org/xwiki/bridge/DocumentModelBridge.java"},"deprecated":false,"digest":{"line_hashes":["266980849952561426489491682152146681547","157755383342522050090306436053927844186"],"threshold":0.9},"id":"CVE-2023-36468-c2bca15d"},{"deprecated":false,"digest":{"line_hashes":["115378296012340835745044922829865144741","88080238438130108621392084430239430295","252627999116654882766805376604956039347"],"threshold":0.9},"id":"CVE-2023-36468-c77e11e3","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/internal/filter/output/XWikiDocumentOutputFilterStream.java"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-security/xwiki-platform-security-authorization/xwiki-platform-security-authorization-bridge/src/test/java/org/xwiki/security/authorization/internal/DefaultContextualAuthorizationManagerTest.java"},"deprecated":false,"digest":{"line_hashes":["149526161489386035581188106895891129585","24342047154901739722003595904464216543","77980161633803283055466433364462475535","262093554962131478694784951722372652296","80596636874674708133646410587510701812","88287684646919530506540650095155760542","275598344034553953219716165141278733817","141139979624943890481124993284762581747","190871278277279730469895447789262475764","142130735111428320663493934929159020662","219411354906959569191938045603138235894","271333773282779583458336839973577494010","318868123494405669719416064157641376913","270054411609288273734161547164067913215","117777046852041553977015006577290987483","168109781634927041319035126133052194308","63607505120170124613740669836974935246","102053326539283409476383000083948747911","200997938775481151635382836814854154256","207519090677936432580759363879928666551","38517424889925080876176426105368237525","53833407910069279830793435013945641226","101196528780908534402373160625424136912"],"threshold":0.9},"id":"CVE-2023-36468-c98d68ca","signature_type":"Line"},{"deprecated":false,"digest":{"length":793,"function_hash":"313632101753341652536962517168137690568"},"id":"CVE-2023-36468-cd8b2d52","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/AbstractDocumentTitleDisplayer.java","function":"displayTitle"}},{"source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/XWikiDocumentRenderingTest.java"},"deprecated":false,"digest":{"line_hashes":["298758962388330881826274825969241648064","284015289355979205348727918779567282720","235300765948803789125808197149084328071","236310101038178832373972375454513576075","179070925331217792050992586432821381554","38757504482287713363874624544621682304","106787884481877078586791773080880913281","323754778321723177491671865475785703610","114065041320961532354224894364447811351","4385708028378267392098971724499126632","92150554876734187715685601112293835189","84608578463645193812968742705413485567","261891860044941595544046390349801485644","47872315530633260522405734520369416556","16386599470301676164532208129522067237","177641845316655923666061779209816478963","238340557416363211881617889958912542170","186062284129466323384690005926319345157","194959886089009603335572805763878975877","282006238458206131697576767833007084000","232390920425899268001603356338636634962","129935182038533590613854105451648751425","23423024301075793717268991175351338991"],"threshold":0.9},"id":"CVE-2023-36468-d74cfef4","signature_type":"Line","signature_version":"v1"},{"target":{"file":"xwiki-platform-core/xwiki-platform-flamingo/xwiki-platform-flamingo-skin/xwiki-platform-flamingo-skin-test/xwiki-platform-flamingo-skin-test-docker/src/test/it/org/xwiki/flamingo/test/docker/VersionIT.java"},"deprecated":false,"digest":{"line_hashes":["285815744206201828250363665868992250501","309522695156018497754266106056667427646","201574621554033091720102077911563944056","3880958521678648721386666271288173453","156330159579510008341470887312470345453"],"threshold":0.9},"id":"CVE-2023-36468-d979ab3b","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"},{"source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-test/xwiki-platform-test-ui/src/main/java/org/xwiki/test/ui/po/HistoryPane.java"},"deprecated":false,"digest":{"line_hashes":["276942104518944115248350598529824277360","246697261902894235528493432365070088166","222535766503053559958425459378814265244"],"threshold":0.9},"id":"CVE-2023-36468-da970f01","signature_type":"Line","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-display/xwiki-platform-display-api/src/main/java/org/xwiki/display/internal/DocumentContentAsyncRenderer.java"},"deprecated":false,"digest":{"line_hashes":["174386889392609305537377293675838908499","280822806730664088377572570275316574337","340012430739355321488876622105859697599"],"threshold":0.9},"id":"CVE-2023-36468-de18821e"},{"deprecated":false,"digest":{"function_hash":"204288151456559076674249951942442973929","length":1697},"id":"CVE-2023-36468-de3a330a","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"function":"cloneInternal","file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java"}},{"source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/XWikiDocumentRenderingTest.java","function":"setup"},"deprecated":false,"digest":{"length":1978,"function_hash":"287064920237796484083759288912817377376"},"id":"CVE-2023-36468-df6cf95a","signature_type":"Function","signature_version":"v1"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/XWikiDocumentMockitoTest.java","function":"tofromXMLDocument"},"deprecated":false,"digest":{"function_hash":"144885478412044114390634570464544250161","length":467},"id":"CVE-2023-36468-f401224b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59"},{"id":"CVE-2023-36468-f7603601","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/test/MockitoOldcore.java","function":"before"},"deprecated":false,"digest":{"length":25173,"function_hash":"296723282724734520624419204872831042481"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/15a6f845d8206b0ae97f37aa092ca43d4f9d6e59","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/XWikiDocument.java"},"deprecated":false,"digest":{"line_hashes":["306680397624765021903643040936913233907","274914008552794379919472362541629966448","265910708343939236076979540637361896795","31486284957954308370321548377879702120","310193289869039981419096259869396047378","225084596401143472466102322833890856338","259924122661507480505521871111862196322","6575990602949897535108324136252536156","148064001832138838127088634736306180839","132620890079883448053891578938940842909","4632975897174658262373675725238105283","55123911454506762122206379659335490021","279380096971811795801937773712990639007","279306183752140341330701886149529092239","328757593578206484476094265018843544095","2591774583556728543831994741815357475","307714854135084051502434795070832162266","284110241762430253124286134208724149043","36636375595781466539634711734922845412","70402363866947698563329524054784525057"],"threshold":0.9},"id":"CVE-2023-36468-f84e9dc4","signature_type":"Line"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}