{"id":"CVE-2023-37913","summary":"org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter","details":"XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 3.5-milestone-1 and prior to versions 14.10.8 and 15.3-rc-1, triggering the office converter with a specially crafted file name allows writing the attachment's content to an attacker-controlled location on the server as long as the Java process has write access to that location. In particular in the combination with attachment moving, a feature introduced in XWiki 14.0, this is easy to reproduce but it also possible to reproduce in versions as old as XWiki 3.5 by uploading the attachment through the REST API which doesn't remove `/` or `\\` from the filename. As the mime type of the attachment doesn't matter for the exploitation, this could e.g., be used to replace the `jar`-file of an extension which would allow executing arbitrary Java code and thus impact the confidentiality, integrity and availability of the XWiki installation. This vulnerability has been patched in XWiki 14.10.8 and 15.3RC1. There are no known workarounds apart from disabling the office converter.","aliases":["GHSA-vcvr-v426-3m3m"],"modified":"2026-08-12T13:32:38.286915Z","published":"2023-10-25T17:59:46.290Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-22","CWE-23"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37913.json"},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XWIKI-20715"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37913.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vcvr-v426-3m3m"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37913"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"b9ee5084c8b7b1c2a3d6be8352544cc0699b8ebd"},{"fixed":"6d6f93a60c764fd911b4aebd06e7e2b2afc02337"},{"introduced":"fdba4ca1398766e912f7888af5bdefbeef60d8b0"},{"fixed":"68863e636fb48bcfc933880f81779d7dd17a06b8"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.5"},{"fixed":"14.10.8"},{"introduced":"15.0"},{"fixed":"15.3"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"c976070117be44fd3d51affd0d4f9bb20c7ef6e0"},{"fixed":"507c315212f202b3a40f93e17d436fb60af4cc61"},{"introduced":"96b4a230ee41ef74268c9720722f6473c705583d"},{"fixed":"ce883de5c2894ddc8190a11a6594abb482f9ef7d"},{"fixed":"45d182a4141ff22f3ff289cf71e4669bdc714544"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.5"},{"fixed":"14.10.8"},{"introduced":"15.0"},{"fixed":"15.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-37913.json","vanir_signatures_modified":"2026-08-12T13:32:38Z","vanir_signatures":[{"id":"CVE-2023-37913-0b63afc8","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilderTest.java","function":"xhtmlOfficeDocumentBuilding"},"deprecated":false,"digest":{"function_hash":"320520424700573147805215170993770994513","length":2019}},{"deprecated":false,"digest":{"line_hashes":["39536016362016082044994697261149010260","108935490572688537808862732228659324817","210728923984461719441347796300310022706","214541046429971023092159954576034153601","119613821013980183527407730917306753924","278173365334811736515067495267060695393"],"threshold":0.9},"id":"CVE-2023-37913-10679747","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-bridge/src/main/java/org/xwiki/bridge/DocumentAccessBridge.java"}},{"deprecated":false,"digest":{"line_hashes":["240895419082227105495469669731725742895","81745162332652217917292249501235967791","87981581168798262532858336264517205128","146456610175377625752961771550236045238","298299230634333253227564541646836254079","317579409874185717368021428057325018447","94509307634408623205201665076573769766","2599556138139028970842120332936156377","279641879984668709823898754400064265155","156334932913619190800867434482348685382","320984360492738476660243909785539630950","276695545085459318448729067077208245161","260931391594467808244556532802780787751","59840424872070193699232362125762204186","12643079832410409219580514148132206648","133169347624079601280508959319240376967","309003122549181473628291101547983007328","114995687459967554352473963011473141069","25955304254354248131166613057412156447","97792540577587869973032456030989385276","38980179536110149750243448951395351738","149866981391559304525979315126472599264","18200696010313551499882400379774187995","291918357014143090937589518705595122959","6346083560161333598307218816273481799","234763314759937177129059601990163348635","244076138061711618534704406667736076622","274104834150918088769979455929557324403","198895805244712684880288221433563544484","54019620231223247178165333999680498259","171118056404514155114828773006234768921","161620047670525967881894690550869225016","124453953763869642142521867136707503279","157513096545051718514508709882660787564","97246607438717604075708743627966715584","240034307105183845202496025246786127881","307948033670696560282231416554387358138","279041001104694550054064955616129851987","51685828312247724567953333825330533698","182281895548892929918902393016679758284","116873941727372259280788595471739849064","166356161605199227775086274054169381619","316551989836731571849164269179425019435","295571437533744494511500646285542837843","278120652185982030577661813896474800875","243226169997937452823980550162021544407","340201382016008235322775992376948002976","203966005889851447432037908955472356560","299384022428745762761520593582382383594","318027703432370729610949923505603959763","227325716562170170562512957354744759731","223123300442337114811983317338476777919","234349143201029753557741043883623338006","240165567560104550375063280259607809239","302277967956212447870779051566294205123","247998126506663923509484038678620449261","232287033860575094858569702802710791632","325613234066801298071879737320300527508","162326617706877751027184314841379945331","286547727711236876038668059912796924345","23302843862441407157623115771189213925","222037986153176284030819897136230022919","74843645854499375190383586326754927857","314889621077813622332047185768311752126","40432689705732653363601912891944227621","64773099474477372219379516474167303193","77925947336888753139784063134708872860","302475405299518222888371932532475875402","151996047350806342081741211830866210554","275814717485288133317959195677939261066","97387867494926678879285607804214223558","329978604757590944486859786288254062627","174885293757477751699418776527408329171","119423790691974832476037730586576413560"],"threshold":0.9},"id":"CVE-2023-37913-12e1a3f8","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilder.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/DefaultDocumentAccessBridge.java"},"deprecated":false,"digest":{"line_hashes":["134716272687585261185561056205477350002","95835679278997622463597439955286412984","246460793158952926767905588698664165593","59291177620269766327854360501161266835","45188358914353632479142619626225531296","223024744027020562845412947922440468423","331209863154598268985085218330565988645","167320645873663139666634215086300546671","59878508493464396864205008101131960796","257977107676503204675837197279880184879","81064156628076901268507902252072168720","293942030824839853978069055012277177425"],"threshold":0.9},"id":"CVE-2023-37913-1416b8d6"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/doc/DefaultDocumentAccessBridge.java","function":"setAttachmentContent"},"deprecated":false,"digest":{"function_hash":"122778533637444109573509426959564172264","length":508},"id":"CVE-2023-37913-170abadc","signature_type":"Function"},{"id":"CVE-2023-37913-178ec6ec","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-wysiwyg/xwiki-platform-wysiwyg-api/src/main/java/org/xwiki/wysiwyg/internal/importer/OfficeAttachmentImporter.java","function":"convertAttachmentContent"},"deprecated":false,"digest":{"function_hash":"14238504468624864696866180005463129233","length":1080}},{"deprecated":false,"digest":{"line_hashes":["176005904750241097088152549285874121612","279296963284427042003526565737808410901","314800470911573978055566505588866391159","337845700467151255310472563744880190736","171360076357647417870062547469324132037","145611120732799906753026527278245262483","248530993097753013773993526469660320380","92895432327776742255621356616186255256","319086898857193879705502898197278604687","194753354171849617305537781442564827120","243962419689135645376571202755706691237","55630476934461760032929125490344698156","332987257746702875142392271440514996421","251708806581025896694823779953757276952","283422950908387922202078413461437017305","14581298674890446175787904333231001731","85868334552851186631256056434111531616","211894469171516016978812343703642604197","245958774817903173857549707701442932855","213714343630487451670672183527632577528","325301888425528450310983147374247848429","308204706613341108946824922895968925882","134753662852952854225048434421340303087","278036932295627846219781151883119747140","239080751485750904344196304517598895191","133044703629211466664732318421045599488","237201543456748920430459379367242234554","215104016868511508373700918618857493997","50289951597826800086058007940425052127","33910968555933515688237106541441371204","128993412164989067386417209354773412988","119857937797647693666099098715176409378","285371600461428342102500628080591314802","43194141865368217597816919939134444935","172140939111133043092370672578225758722","146900291369910696252341014917449329868","16551449228868153131791209206065352393","177426175163763088590052055185883689639","19672376401711530994587778632838232711","289217831056153019328348026680267765764","139583613423637976302698816876032642845","237243874173663149754491592457101206500"],"threshold":0.9},"id":"CVE-2023-37913-187be3fc","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/filter/ImageFilterTest.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilder.java","function":"build"},"deprecated":false,"digest":{"function_hash":"51702021855195583433612145912377864803","length":681},"id":"CVE-2023-37913-19d56e69"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/splitter/DefaultXDOMOfficeDocumentSplitter.java"},"deprecated":false,"digest":{"line_hashes":["81600025388906397698421671279816472247","158244299454714979681161507543473160583","163193992802835521350643549808705414096","279118738397569944925485559297762383710","235513523358004343077605558458657192308","320984360492738476660243909785539630950","143495883138640018657485672257801217227","157422932984650816554484881383555907987","98698831662850691949877692354750757368","112494246955956170072453544666772216074","28157906816587298992875351328871264338","296006743267358553189828526320473662571","36064577432348580563217450617445427864","70380640558133113167561441955981402646","57941405159253168223297719403848493965","92446437374931069388658295689476986453","216831774909649889664120271901099115068","159617516269324539911896154022326142542","122960749344645497993466258633089253555","134289913005033461362283456726868089562","213381481180503248600475140281354627358","6710565838504843750803327365261643307","118073005569264737565411778624285860198","43431725505722274891455799608143696657","202066546313360637138303093242784843488","40294665936017889635154756602773722871","311829354161495162224210386429797096759","73555630962675879597702794514755182665","226968366159689732730461197740863211941","336769024665853992595139605636792543610","92802661175596368340210051797628555461","148943909558603347729289854132270185133","61697777350738947755017329222088463111"],"threshold":0.9},"id":"CVE-2023-37913-2289bd32","signature_type":"Line"},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/ModelBridgeTest.java"},"deprecated":false,"digest":{"line_hashes":["161848205658100410433686874901835120657","328146223355999962931536453481037903397","105705985785432176116635256263007256559","272120094232993257630540742501472668962","161011292106195660561559977846885701444","265330238212647417432917307216790765595","150305005987288316552331408021261711335","26739392852316621499027570011633480471","189392902779550771582162657587168978277","229510170235464515500588684549941333616","333630767874365795947879214242162295972","225696166340461968057431602741482167443","327595195998238759252656645665021468948","310839424145238192919802296948860056942","19250522087559729071976964466804692830","242860004300159107280970779128559764669","87724889482689425102076672395488769474","150437139493594668682280710619829128051","317156630850973400356449338849519576611","227604108314253276412481646492562287764"],"threshold":0.9},"id":"CVE-2023-37913-254afead","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["184479053416740962222040410120242691948","78215968422163466080399765686543861933","304881329939971937261285496002560321511","147430409886146202442766393864590456413","64514206831697543618666538058913962501","272274362883883933829232599409017434526","259272207310143052559870771187984538110","58214846471524638177973189975514333991","303462882272055389523537104261544082958","278488439273213791253865446061795172029","146592244381987382875412704062099461338","91600915800028899602032220026643674201","186562241586211121391821430949358198446","268756702051080617419519614784874460499","312633025163203482403584207096807036645","135717302790699327832438046662348529062","249679288845583867306114099766698262374","208081569324803589783260809322526483144"],"threshold":0.9},"id":"CVE-2023-37913-2bacfe68","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-wysiwyg/xwiki-platform-wysiwyg-api/src/main/java/org/xwiki/wysiwyg/internal/importer/OfficeAttachmentImporter.java"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/filter/ImageFilter.java","function":"filter"},"deprecated":false,"digest":{"function_hash":"336953425471986375950686037408870700319","length":628},"id":"CVE-2023-37913-2f55f65e","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"},{"deprecated":false,"digest":{"function_hash":"334244688152387039613724269929935122820","length":549},"id":"CVE-2023-37913-2f8aa03a","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/splitter/DefaultXDOMOfficeDocumentSplitter.java","function":"relocateArtifacts"}},{"deprecated":false,"digest":{"function_hash":"206200640592309370048172774756409834440","length":2948},"id":"CVE-2023-37913-33ddf9ef","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilderTest.java","function":"build"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"function":"importPresentation","file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilder.java"},"deprecated":false,"digest":{"length":407,"function_hash":"224529950710648238486362302909093815173"},"id":"CVE-2023-37913-3426c840","signature_type":"Function"},{"digest":{"function_hash":"33872763236987141693372652331566036035","length":1476},"id":"CVE-2023-37913-3cfcd4c5","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultXDOMOfficeDocumentBuilderTest.java","function":"xdomOfficeDocumentBuilding"},"deprecated":false},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/document/XDOMOfficeDocumentTest.java"},"deprecated":false,"digest":{"line_hashes":["193662634863735120534974007984268088934","202714349143122599775631211402489850686","42627482630420881362241101927950874083"],"threshold":0.9},"id":"CVE-2023-37913-3d9dd5a6","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["159526166211703305754078457922373593874","287204439760440618661334893192795140116","187262724233988672802575344882095355335","65183503186247823082137390818621140739","94744169214263536521791709816318852949","279641879984668709823898754400064265155","59631639438567229310350670061053344940","117728131898411177091824591659352821168","330782279091063819012649035156991609090","227459496223765578179713223346580939510","263450257136062327344445097946853284040","118211770723459301579124613582254988756","339101684433789680113389334363003668989","130055790129782304292528132928450054592","228743904011166170679031872187823647585","213105147095608230715298308573330730360","234240124334167738582729101055477068179","73410159119878114337000303578792076879","142578000965671907558835501438269597688","311390893724228379156732517152823130455","24274606278578137239348264569199667346","35933051650385318870165868445899735969","291499840864147852895921749724536168280","222454179692589546713812594770669091697","32077508911658266722870072304845892077","138599695581298183613037246265048697177","237391954563198549039712018139136121424","132891836109563872960550961238171089178","162568712275653302820472292681645523236","274164819408984181510340302416822414211","297958567437674700329672258243237899941","184066255439206802181887501822256548934","76180132856672391315261018782544960591","44904165807392570308348838370412069186","173427054559703618212420553217648424533","229813078500205670090382963439612225233","294955654894043320361502485134104886822","335282576628134174929053035184900582675","14367520977049626686582925838203279715","91650949941233827826447599584035131006","251112209369430542080806440181822520333","212649403185387079123768843817912871644","280503496713173576634624656532312234251","245853328458854141954603186942989074879","314495160923647600113461337973841463051","33545955488627628399990088182768306834","238056569232327930508757688127649063932","283396221098937409377484718976904872578","96068637816600408603513261879707560626","326988933690549390898791920387693781712","126973793788449927712007636964642713691","108381551552112869787620585678539637206","101663827887892170955232804415486924538","188794169303945461151778748624657761986"],"threshold":0.9},"id":"CVE-2023-37913-41d80140","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilder.java"}},{"digest":{"line_hashes":["202288323224391685134726352837178333610","61675820640429540249486655503416380265","310021296959934341027727795148145378364","147331620644806081071151869412638164875","193821436476083791760319418252264093699","183935484312822962326320360671076584677","58210355007912580261028044951441045257","338460138143450373141735104261235943524","109357762382107972351047411118616499869"],"threshold":0.9},"id":"CVE-2023-37913-47ff62c1","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/doc/DefaultDocumentAccessBridgeTest.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["90191721373518112330368910304581240306","326190849120113835870040385966133825651","126436932110282515332009488611118192008","264934737641624250693853414333148401967","142921050118546414685262595632037271491","291617578162364809747867430286974398023","284559122720710987179037768307852818104","330363941452015097492204799755900103859","92547749444350756091881903023128890583","173513099424853247093251226117650378135","166576780842450008900757180356301252621","264103604063333543888297362839231974324","210820833524354430360295593700943283968","186317255006951172141009773112439715958","180236746360170345071694010210141278414","77139618309068233407327898126511909394","121126957806690631818586587104032226938","115687707140044570007629590692125795439","145203480636970161176701841774472850253","226342487044197598152639989385050409017","191246655349711668906033006104736700873","250006282186642105016607812901066366585","177676744071038823860804581416232636289","82452834708749709247542617521542244639","43662981273319552602377537550184204388","191475555143644149470190637296473151458","153305615130511863146951746177632592902"],"threshold":0.9},"id":"CVE-2023-37913-5446f3df","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/filter/ImageFilter.java"}},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-test/xwiki-platform-office-test-docker/src/test/it/org/xwiki/officeimporter/test/ui/OfficeImporterIT.java","function":"verifyImports"},"deprecated":false,"digest":{"function_hash":"335480071261624777522173061335235741441","length":3199},"id":"CVE-2023-37913-56734587","signature_type":"Function","signature_version":"v1"},{"target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilderTest.java"},"deprecated":false,"digest":{"line_hashes":["268176534098911345936812032460731296837","288645500807692834114109871471602507326","83541735119644118028804712384265849721","231525728400378510461516115855524395283","21907026234769044891156552318792016707","211056683454183588768166241837033899751","39954614019992638461652208735727435148","202043150903440267388824480469974613387","263450257136062327344445097946853284040","118211770723459301579124613582254988756","321442777058466708297030147643020257608","25308480024377829273435100855229860419","258325152011683616412591582981386631802","45222855788597640303948182789661976907","157489330771122844564547644948973010808","245150095983444247524038863347827641388","107804803894840476018516022600086666053","109278561081478576936839061345872720894","277809475864797091032343376174473343910","205248284769324353196828980488080649215"],"threshold":0.9},"id":"CVE-2023-37913-5d6ae282","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"},{"deprecated":false,"digest":{"function_hash":"289546948193114892837777623775838170524","length":700},"id":"CVE-2023-37913-611b1e2a","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/converter/OfficeConverterFileStorage.java","function":"OfficeConverterFileStorage"}},{"deprecated":false,"digest":{"function_hash":"88027863647652721920209507512168159089","length":52},"id":"CVE-2023-37913-64f2a97e","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XHTMLOfficeDocument.java","function":"getArtifactsFiles"}},{"deprecated":false,"digest":{"length":609,"function_hash":"309497988836510227661504337980517221192"},"id":"CVE-2023-37913-7562b98d","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/converter/DefaultOfficeConverter.java","function":"convertDocument"}},{"id":"CVE-2023-37913-756aa254","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/OfficeDocument.java"},"deprecated":false,"digest":{"line_hashes":["270764742278762567424536493211362317864","40211531404502423991285539957918429738","248872996197005239588528955792514135267","41930664895001822996913536760732921869","152710013220114200348184049799119715944","180287087681737895952100048254009528529","253394816498814279534959105572160720329","329381864779676684403863681857985614385","83187825485342379349704927284766875173","314904333286482193398780662197317549996","116884215334435558625544853468901168788","251647183750021176788658708559677455037","243375648789431757274301622274546542067"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["158665058873827313709422099014254522965","123162008296959061964350393202135270272","100929769510649788589339648744029193510","113368089716288051221420423943188347102"],"threshold":0.9},"id":"CVE-2023-37913-758686f7","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultXDOMOfficeDocumentBuilder.java"}},{"deprecated":false,"digest":{"function_hash":"67754792958006166027505781754199396178","length":996},"id":"CVE-2023-37913-76de84a7","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/filter/ImageFilter.java","function":"getFileName"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilder.java","function":"cleanAndCreateFile"},"deprecated":false,"digest":{"function_hash":"309674034800260065771209694311505848065","length":700},"id":"CVE-2023-37913-78c0abdb"},{"digest":{"function_hash":"300766878074317352495757850231906887133","length":1100},"id":"CVE-2023-37913-79d5d98b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilder.java","function":"buildPresentationHTML"},"deprecated":false},{"id":"CVE-2023-37913-8afd2668","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-viewer/src/test/java/org/xwiki/office/viewer/internal/DefaultOfficeResourceViewerTest.java"},"deprecated":false,"digest":{"line_hashes":["62726856396707862312041768610849338146","219957643398393961644021090999797488461","48688463924869760695313493324800659860","64185713780196188244463808105547239658","57775244583006486793034036172993412068","32185367679426755436558122160592289685","167260153370557085479876214273385813474","100145034296831919880620485453914545569","169278295081693130163845850364029807820","202043150903440267388824480469974613387","39142181297261895563772931908090193611","38914240259326490445471306809293691231","168199687066699860494026692891567687036","78488963650398632656386470864848132174","143030497581065580515569530405173355117","48295265573771601412475734430749405908","112812421039573846291196634967069974215","44045461214608464599377079611778932012","143030497581065580515569530405173355117","48295265573771601412475734430749405908","112812421039573846291196634967069974215","44045461214608464599377079611778932012","143030497581065580515569530405173355117","48295265573771601412475734430749405908","168199687066699860494026692891567687036","78488963650398632656386470864848132174","143030497581065580515569530405173355117","48295265573771601412475734430749405908","116250289636914629986052400551359797185","312578015648571750522234326366334838630","132858341411973427245335226136812960612","39965192119878246512045006677660098433","336412870267280461956859884317222499769","256363421613695571331911334159713876013","249975888074472784335991940889116267829","75109080727155981972726547312122197956","222336494187797290257000450113841885234","193893008810111211771704857225178588741","233163255960861270960978388686760683621","238926951123962252610134936519101227070","26089967710402115052180419111024497863","108064792632462267935875914883773617068","58277395949344010327531125026363909405","47846765433592251533378797943835567143","110804617973282353571613334410801942013","171351029129354608328556873618436883320","111516291619385801275415065905518385984","42981844624432099937167224780312268691","158303808811892059222620422802037732670"],"threshold":0.9}},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-test/xwiki-platform-office-test-docker/src/test/it/org/xwiki/officeimporter/test/ui/OfficeImporterIT.java"},"deprecated":false,"digest":{"line_hashes":["10178421252269010831358088803674883822","261290537394425986491963838784583300034","325599373726854946622822530805835273810","313723746978407576728480798929021988658","231589502582752990864288505995542228443","196474313252548360596603635368210791175","272031175655922507809830813245281347082","93993000465989681126773525446283427213","287716422207559381477825460695522389741","8664732085293969587222081328041658206","150861794543770751289491488490522118645","193854132752896257165860688681553493851","60453069920515896412305912622307360138","246972867826702069145053357805930005395","53854105487738418135825173197756969664","223185179497644471685970467366480693315","128490958201477743911663839676507224406","90205094642167329841122436379476799978","111977733073358277709117103483515908244","180802688055362985527053336834858504351","318657070635476596476275031321927133426","46987646574444870424576215023722289408","443328807340072618471545064374435999","221260142068227790178536594310137662237","67478603352332202498222295716844698825"],"threshold":0.9},"id":"CVE-2023-37913-8b2927fd","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"118114490557669538011248166927709025954","length":2504},"id":"CVE-2023-37913-8bac8949","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-viewer/src/test/java/org/xwiki/office/viewer/internal/DefaultOfficeResourceViewerTest.java","function":"viewPresentation"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/converter/OfficeConverterFileStorage.java"},"deprecated":false,"digest":{"line_hashes":["187691636841766770659654113053651460841","97440195862036223370596457141678189681","167622349314544596738721253398651580785","206724047254941435647529372494274508307","185575702883034701283844537022339559976","78081246888665541687818222584695330503","125280151366206841318434918200626288172","211239984152129947011885775401330107080","183596668903438639172453347817802356741","223070660876966327072800494406406055559","113362984664522366264350416337565351632","190507539964866886269841437210337856371","246614603951440423762497573057615967355","90873992856052066376589447246765561668","12941588870417817063993014953999402464","82878224962118179605500898888270590342","22499625786762241052729319357089130203","109749341756094375664590655708182282306"],"threshold":0.9},"id":"CVE-2023-37913-9795a6e5","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["318389435460753212012983675946809055393","273633393365668215808037652204088664646","220735454640162264659530079980296307588","296996474953494384719231138977645670249","201927369375932802517272295526280950817","278971589014696278401399321608422167422","213816450732649115831861879533981273321","163193992802835521350643549808705414096","94024066604624255375616962482449656713","272982439711122793745900849578916981668","101435417189641689372659647882481325686","9095256042047944635493485999575998826","182947839129431127208938951519718381893","129301164745384597190808539503953308255","338138623105044716116610866343291110936","75299589680739268716465654672135530247","110785581219513591706848283094553070701","302243264928005889074280561750346861983","255769405638257885799853421388446094539","58259280099017926757518989281197237674","210073388496507356198149843813127285592","168243375371766796900854693541310018097","96144085649580648664777915182232738376","165359828591369431161704451283167838731","306973561092490916188122979328915663117","58219801996423582861090952352234836805","164864978868323249845721228004774980301","31565035518043089300483677735212681637","136858553056029766611403500861736656813","305083429786781523507061236554372535571","235790354819765261204557601874384309318","129529176387732195171843441535589897697","111161329807655987664326772029761368550","32296365464326315984717932197726733791","332762774533244213526043470804220332881","165256516903878725063976436124788949236","31711273952715103868735993571998597516","59378455997415634063659879178021668398","211611693956499232819809480455640074322","55990792987187366572005704359451745531","7365231118388679491558770064013459657","298837580440445148539428210281583152338"],"threshold":0.9},"id":"CVE-2023-37913-9c18c77a","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-viewer/src/main/java/org/xwiki/office/viewer/internal/DefaultOfficeResourceViewer.java"}},{"id":"CVE-2023-37913-9e8e68da","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilderTest.java"},"deprecated":false,"digest":{"line_hashes":["213771753064235764000908576785413054655","297223817634094596955858979371381989612","114972811664783406002863318464286037841","172975507240277485889859941083142080770","211056683454183588768166241837033899751","263863429954906850187350128213318168868","255191018628237364207908149305206480621","73560765239715772196485081739083380628","285553706867590794887978440469975580860","185386064772170651044328723384705955328","87133462000899249415952987878007258604","181423019067359121403569494197591257985","91802148995051574868177414717709342540","70729137423565609501741811133166407365","74465807646176448114149860315403965341","119230829838807435197836938734124519127","40790692044230157442289461226644567642","263451808028820779610497543249444843064","185145032946459888671522436541327022326","163608647492762735790633926405898279737","328486148667476036842659040054193667638","303966627308193070354375261274521130628","238075128185849143475020781932988336662","232246574323002435018102656008997387455","88075358472866680460325688278836536214","205879752487064784820482101937014373468","22698538534798815233813091010004874191","224672319792950727445646268785895132735","205874701775734146951022081421795755178","153922764798472969187997594133007925522","38482730773098401686478619693146998925","73683148811865189897662431088760223364","231819422026581856513788459903506609586","102755590577993096809199939590494805818","260251263432679023658357062294248812588","239296588647652008759630698865586386126","259437448721653261568917399601972436840"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"294653547781114797543975894797025523141","length":567},"id":"CVE-2023-37913-a4fa4124","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultPresentationBuilder.java","function":"build"}},{"digest":{"length":811,"function_hash":"60893448146235726506672165397522131294"},"id":"CVE-2023-37913-a567b685","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/filter/ImageFilterTest.java","function":"filterAddsImageMarkersSpecialCharacters"},"deprecated":false},{"digest":{"function_hash":"30837413902104710801939686149374149290","length":1163},"id":"CVE-2023-37913-a74b1c00","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/ModelBridgeTest.java","function":"saveWithOverwrite"},"deprecated":false},{"id":"CVE-2023-37913-af29e09c","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/builder/DefaultXHTMLOfficeDocumentBuilder.java","function":"handleArtifacts"},"deprecated":false,"digest":{"length":724,"function_hash":"3014893313710217929084456827539939815"}},{"digest":{"function_hash":"294448050071195059119893713840484932805","length":360},"id":"CVE-2023-37913-b4158dc6","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/ModelBridge.java","function":"attachArtifacts"},"deprecated":false},{"target":{"file":"xwiki-platform-core/xwiki-platform-legacy/xwiki-platform-legacy-office/xwiki-platform-legacy-office-importer/src/main/aspect/org/xwiki/officeimporter/document/CompatibilityOfficeDocument.java"},"deprecated":false,"digest":{"line_hashes":["335309652555391222147839246399435226513","161277160292652559580719806362515278554","276509670946918526111962740646022501016","309443037212771148031006855694537208094"],"threshold":0.9},"id":"CVE-2023-37913-b5925004","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XDOMOfficeDocument.java","function":"getArtifactsFiles"},"deprecated":false,"digest":{"function_hash":"88027863647652721920209507512168159089","length":52},"id":"CVE-2023-37913-b5f1c93c","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/builder/DefaultXDOMOfficeDocumentBuilderTest.java"},"deprecated":false,"digest":{"line_hashes":["306690511476572834378089134023041667685","247170923244476144671712434758963672185","292453005342437103381131701355474940023","286365152406619888333559524828297767435","312193705994797058440218116988131124378","317136155761161219929270289684520565223","115496259675593452742959198968400282416","33335802274430185904395481887380980436","14027767675958781247600482754080510256","188385027858522575221847788566358164944","23287950583977825155764562250416138472","249749110766235406733837862744491615284","309567521934529902884073174332632048512","299603776664041987715727782463323176129","279503858584184561138584678943385495208","53007362697761529722246307550124875201","270048549128660306604004337277023657467","265421821769450560647849817354478130741","254825340448474296278918307354625288593","338075496326672670846794354676958353757"],"threshold":0.9},"id":"CVE-2023-37913-b779122b","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"149322294499115772885903147247570103889","length":1520},"id":"CVE-2023-37913-c5ecee8b","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/filter/ImageFilterTest.java","function":"filterCollectsEmbeddedImages"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["231879620136368040934374901513576835289","68285909536412949825833009131755153153","261564864373597465625242403890056973123","221554634798088773290053329199236061198"]},"id":"CVE-2023-37913-d7304599","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/splitter/DefaultXDOMOfficeDocumentSplitterTest.java"}},{"deprecated":false,"digest":{"function_hash":"286747425945264220244543347922668326281","length":626},"id":"CVE-2023-37913-d7c8c61a","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/test/java/org/xwiki/officeimporter/internal/filter/ImageFilterTest.java","function":"filterAddsImageMarkers"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XHTMLOfficeDocument.java","function":"XHTMLOfficeDocument"},"deprecated":false,"digest":{"function_hash":"276849226725221505050513190310608889350","length":125},"id":"CVE-2023-37913-d9fb0b42","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-wysiwyg/xwiki-platform-wysiwyg-api/src/test/java/org/xwiki/wysiwyg/internal/importer/OfficeAttachmentImporterTest.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["156288343082966491736617492898903610412","323617298274838715717561386856796145845","51383310941871471841446361127784782224","164283050868800753842152010455778914809","109179261289879041037922246525508699624","2556512293671071911230379560421192649","22975048535641916798440751658488462714","50616665894067592526997634316892606655","109179261289879041037922246525508699624","2556512293671071911230379560421192649","22975048535641916798440751658488462714","50616665894067592526997634316892606655"]},"id":"CVE-2023-37913-daca80e1","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["162407907310160018771354238201032560224","251737580735087007684804766190923659458","8518647929869174057619688037856031738"],"threshold":0.9},"id":"CVE-2023-37913-def5610b","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/converter/DefaultOfficeConverter.java"}},{"source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/ModelBridge.java"},"deprecated":false,"digest":{"line_hashes":["204512300686311034860322986423222496979","66102959452613291281394827472594811497","319770847223093516172906392261396145120","151512660263581663414721192712364938444","86822483068789343856512222965406750681","80071052113551110642464973115084576382","41654950769374701476905156398866168284","232179140913193836975652521204173054710","242621840417456750330147463512113168758","25147309409057368391795875369781135530","220365945152769757920669072436267342429","51125585475206699443392424417893713419","26057652459794179033286958643332233745","322804891568998568911880732916765311821","98460339697618356591604815074157915991","214606511552008865153559129412132054783","21960407096529825493876985201617013395","184200604340823769319590545134371460523","271812541604920656008435545175417514723","45498810041747726705581904398842207754","157387187574029357917343239073094498467","160132785888526863639675137157826703860","282373832758890337527648907550864283975","80701311147666647188718428632371935056","287839428038274061393036268458191021748","104158713450689393539988810484230868664","100763121062272990632468572474328990783","108587633537507210242609878158511307392"],"threshold":0.9},"id":"CVE-2023-37913-e40a40b6","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XDOMOfficeDocument.java","function":"XDOMOfficeDocument"},"deprecated":false,"digest":{"function_hash":"135611794718721112311748151606158646101","length":162},"id":"CVE-2023-37913-e5c81536","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/internal/filter/ImageFilter.java","function":"filterImageSource"},"deprecated":false,"digest":{"function_hash":"118671082829543612304568408882666875149","length":909},"id":"CVE-2023-37913-e68719e3","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XHTMLOfficeDocument.java"},"deprecated":false,"digest":{"line_hashes":["2970454838245690638918714655484275505","47641388519891541892362207842780374531","59279473956035710510988439202220030373","305620618104426310064713771379508986416","200270703957053346814980607742700054451","262573499908197613475699565938571458211","190659674244443277519632149010453756741","275163718793376584013613649453393917881","318063068654335972816552106190772087557","243163338351752018609828523154451636349","309516258976041567081851757245285532216","171557266319689110444366014650189066702","145229156854741171583701927248719456998","85185084343958264640842471551995494283","328950186005241647307741387273542873995","1975346608414592445496579872447020756","36818119904525782010167076602160964313","268520597479041108260627173871407340199","158471016732430577564686159097762032394","201049245510339199339626278287775950113","287796328080659598890716994122285544315"],"threshold":0.9},"id":"CVE-2023-37913-f81703a0"},{"target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-importer/src/main/java/org/xwiki/officeimporter/document/XDOMOfficeDocument.java"},"deprecated":false,"digest":{"line_hashes":["2970454838245690638918714655484275505","274888922209404577700636173406692450606","45245487158629373136706352995707135072","171484054736151478480113115205272268391","274583688506811954934906591752604307100","125947081785222043554856909484533087993","287028237583959182624773771699629075115","165632296775475387944653811694144858998","149882124461366484770949511967481566500","77699366980346816968491825486787412827","303647774827402414976412287163358382764","98474926467175035611255080852687690386","112362127230773745910783001592900957944","320087586977035818408258131557221611558","89286256255743059268046255610442045693","127597000109136617954415882639843723534","337329786222063559416853294034755783318","239050763762688363807417628530022034736","61201958728540883353868417001237225743","149490382077962012846589543865231959048","36818119904525782010167076602160964313","268520597479041108260627173871407340199","158471016732430577564686159097762032394","36068140966294766850541862577352315015","123895681573718499106982786118151586841"],"threshold":0.9},"id":"CVE-2023-37913-f847ed06","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/45d182a4141ff22f3ff289cf71e4669bdc714544","target":{"file":"xwiki-platform-core/xwiki-platform-office/xwiki-platform-office-viewer/src/main/java/org/xwiki/office/viewer/internal/DefaultOfficeResourceViewer.java","function":"processImages"},"deprecated":false,"digest":{"function_hash":"308352543669685191520897807813545250521","length":1256},"id":"CVE-2023-37913-ff969e67"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}