{"id":"CVE-2024-31981","summary":"XWiki Platform: Privilege escalation (PR) from user registration through PDFClass","details":"XWiki Platform is a generic wiki platform. Starting in version 3.0.1 and prior to versions 4.10.20, 15.5.4, and 15.10-rc-1, remote code execution is possible via PDF export templates. This vulnerability has been patched in XWiki 14.10.20, 15.5.4 and 15.10-rc-1. If PDF templates are not typically used on the instance, an administrator can create the document `XWiki.PDFClass` and block its edition, after making sure that it does not contain a `style` attribute. Otherwise, there are no known workarounds aside from upgrading.","aliases":["GHSA-vxwr-wpjv-qjq7"],"modified":"2026-08-12T15:15:13.129339Z","published":"2024-04-10T19:22:57.494Z","database_specific":{"cwe_ids":["CWE-862"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31981.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://jira.xwiki.org/browse/XWIKI-21337"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31981.json"},{"type":"ADVISORY","url":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-vxwr-wpjv-qjq7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31981"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"},{"type":"FIX","url":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/xwiki/xwiki-commons","events":[{"introduced":"722146367f589d701b0c0e26d9df6cf0ac07b55a"},{"fixed":"4810ba1812450ef533c882c5abff598676b1be18"},{"introduced":"fdba4ca1398766e912f7888af5bdefbeef60d8b0"},{"fixed":"5596ee59ff8035c3141aaeddc6e66f119c30574a"},{"introduced":"1e0e26611ad39442be884e876d902441a51fd34a"},{"fixed":"943b4a6a0a0e2b9b94f6f184e823f82b262ea8d3"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0.1"},{"fixed":"14.10.19"},{"introduced":"15.0"},{"fixed":"15.5.4"},{"introduced":"15.6"},{"fixed":"15.9"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/xwiki/xwiki-platform","events":[{"introduced":"804f16c0efbf6ba3d08c7ad780b81b7203741d8c"},{"fixed":"9d9df1a75094bc677015c7f8321a7e2081662aae"},{"introduced":"96b4a230ee41ef74268c9720722f6473c705583d"},{"fixed":"0e37972524b5a68c44734112f38a48e746b0909e"},{"introduced":"cb249a1a7570161ad6672449fbe89485fb489e95"},{"fixed":"7a8f9b1236bc9271b607fb92e700377e37f67cf2"},{"fixed":"480186f9d2fca880513da8bc5a609674d106cbd3"},{"fixed":"a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"},{"fixed":"d28e21a670c69880b951e415dd2ddd69d273eae9"}],"database_specific":{"cpe":"cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.0.1"},{"fixed":"14.10.19"},{"introduced":"15.0"},{"fixed":"15.5.4"},{"introduced":"15.6"},{"fixed":"15.9"}],"source":["CPE_RANGE","REFERENCES"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-31981.json","vanir_signatures_modified":"2026-08-12T15:15:13Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"39258519081739396248048319522055033573","length":2728},"id":"CVE-2024-31981-0fdfdb91","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java","function":"applyCSSWhenExistingStyleDefinedUsingShorthandNotation"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73","target":{"function":"convertToStrictXHtml","file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"},"deprecated":false,"digest":{"function_hash":"41703459756303602656522785024875016391","length":475},"id":"CVE-2024-31981-19bcd2bc","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"41703459756303602656522785024875016391","length":475},"id":"CVE-2024-31981-1f70a3fd","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"convertToStrictXHtml"}},{"digest":{"function_hash":"177148869857451022214652396380344651544","length":1048},"id":"CVE-2024-31981-27b92494","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"getPDFTemplateProperty"},"deprecated":false},{"source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java","function":"applyCSSWhenExistingStyleDefinedUsingShorthandNotation"},"deprecated":false,"digest":{"function_hash":"39258519081739396248048319522055033573","length":2728},"id":"CVE-2024-31981-399733a0","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"length":1197,"function_hash":"205800397832702398839903409506395586435"},"id":"CVE-2024-31981-44db1b4f","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"applyCSS"}},{"deprecated":false,"digest":{"line_hashes":["297910231308411585522318552937121803584","123686931569608343004845317044397790834","299876310918596646571044836739436978606","87377755032522861106717120420482666488","246056105141859092301277182219826828227","242827100927113915810995946287179699826","56976229914716193537798674956910859315","69623826686599182113689577754842121553","157349353695492716951431012150862296950","204289282102182074566844251933000343015","293280869484058200992796782355856837264","139492993842826978694756427146997159693","129215223029730488488916422960621850055","265040495165602348073258554735128110808","204754119378577647375076205589723666792","123349505874913035182191895021509004860","284710542290964436937955813563676573026","272021325714976980028446960082267883107","269420992913327537658960344288292005679","59303818158546885007074175770590979501","80712588104888283181930067699385147899","262355431128926193200132911819071129710","82948000697534531630035448950707321302","154616147337310145229929869891551660546","36217403140902486375485059626672181305","282418774148072766794826250908968976371","287997217661933356296393530057418548773","88169740261661082440070086813370977684","273817208824751672231106101176677912995","95816496806954490160028317124427601170","72726379477665200451437490579371794088","245969994292992556064371068706366604701","338220263415733700178095644696437237181","87722940004281089039711765248819731950","173458769242826183307374103662922830188","138227350429573914152027564102734621875","60154878417880309395557686223420587504","269465645328061055073749634915907372951","130395330691738795612979794618643148141","11652451511063461110772798837084339309","98258763075558696121475407121449173978","17131911907199775368719168731710245843","313497039265267887003658335267855961949","306446762743497115061746243076178371971","64579314163914127745991024001698025085","257626561214371232755128016383395050243","21326156200609958175244324460030105986","34076979390226702865530159566756836112","315054396262770642178520173938590230240","135982543847537825818266253440190483369","274605184968798560931339068749396999827","55864105374058543237051091295854487984","178117558519489445597620347675828638316","129578681596213839726512138752193260042","93463057179839376014438057154860530636","176437063742992558072333857434215911174","288454429415839646768730283304568646346","136804928900336950587916637769133385449","37519442031256812383337164439218994203","41685285043491459415741944889597456339","183282389048180052460675809519588277561","277965171614028402289258723404044233380","280513577697226990113883644392628893603","202383496106143073505066758792949540716","337721316323583314056041988413851332064"],"threshold":0.9},"id":"CVE-2024-31981-459f0ce5","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"}},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"},"deprecated":false,"digest":{"line_hashes":["297910231308411585522318552937121803584","123686931569608343004845317044397790834","299876310918596646571044836739436978606","87377755032522861106717120420482666488","246056105141859092301277182219826828227","242827100927113915810995946287179699826","56976229914716193537798674956910859315","69623826686599182113689577754842121553","157349353695492716951431012150862296950","204289282102182074566844251933000343015","293280869484058200992796782355856837264","139492993842826978694756427146997159693","129215223029730488488916422960621850055","265040495165602348073258554735128110808","204754119378577647375076205589723666792","123349505874913035182191895021509004860","284710542290964436937955813563676573026","272021325714976980028446960082267883107","269420992913327537658960344288292005679","59303818158546885007074175770590979501","80712588104888283181930067699385147899","262355431128926193200132911819071129710","82948000697534531630035448950707321302","154616147337310145229929869891551660546","36217403140902486375485059626672181305","282418774148072766794826250908968976371","287997217661933356296393530057418548773","88169740261661082440070086813370977684","273817208824751672231106101176677912995","95816496806954490160028317124427601170","72726379477665200451437490579371794088","245969994292992556064371068706366604701","338220263415733700178095644696437237181","87722940004281089039711765248819731950","173458769242826183307374103662922830188","138227350429573914152027564102734621875","60154878417880309395557686223420587504","269465645328061055073749634915907372951","130395330691738795612979794618643148141","11652451511063461110772798837084339309","98258763075558696121475407121449173978","17131911907199775368719168731710245843","313497039265267887003658335267855961949","306446762743497115061746243076178371971","64579314163914127745991024001698025085","257626561214371232755128016383395050243","21326156200609958175244324460030105986","34076979390226702865530159566756836112","315054396262770642178520173938590230240","135982543847537825818266253440190483369","274605184968798560931339068749396999827","55864105374058543237051091295854487984","178117558519489445597620347675828638316","129578681596213839726512138752193260042","93463057179839376014438057154860530636","176437063742992558072333857434215911174","288454429415839646768730283304568646346","136804928900336950587916637769133385449","37519442031256812383337164439218994203","41685285043491459415741944889597456339","183282389048180052460675809519588277561","277965171614028402289258723404044233380","280513577697226990113883644392628893603","202383496106143073505066758792949540716","337721316323583314056041988413851332064"],"threshold":0.9},"id":"CVE-2024-31981-45be0f35","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"},{"source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"renderXSLFO"},"deprecated":false,"digest":{"function_hash":"177591156390817839704444691935254914055","length":465},"id":"CVE-2024-31981-50544313","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["10509348528298869625935822647600889720","89449116829644455567732850613623003024","34512727029790683694432774419408905664","101086479171495275558525826668753339982","121071341332988723963948067568903408968","276557802328562895430476700579492396530","276081929052408674741787866189817825131","290040289079087560182712151030179501900","144961089154650466220391969644997958258","251381921226099743438789863978571089584","72700462139921336942264343836524458701","323754778321723177491671865475785703610","97214466430139861201614344250804579690","314029889304639225627667363501436021495","24122698124491548302056813441058103303","217686555852293414035698000967692344951","89453818306897104892756371928980694252","145383404622960016543571010554842855119","274028202076065213808455238795674141669","327235049677244780419943594458947801665","218022846306871607468917824443486353421","270239652359824220555832487165001920122","302683090179299608980688589639761822152","185541639468881568606894274959208443860","120135842387424425282075030637841711041","147527045036102780237884530485808640594","57433219418412966194309501305167535851","235140616833794395356959116041765504466","258408662911685076312437097272622263031","43823855765553242443002484462964737330","145705466991588922775616880236041641863","253384436840545937265699284960312081413","334951723073567861563589582863344920112","73341681587324854660107701722572845107","294039701918582965403434757514403859517","292940732203954043507274608716905120558","272845225026625789194138818242840793716","278578452630260763731403312726382139111","138554638364032354066675465437027787645","258219359806401447511639531895912869717","298015165572923592735222106016967340960","214556194053710499403946249114340513057","151579109189184561761291227021909685677","163705505405816821702513961072256701026","123894786232086454580205062416832975335","153943152347686881650796818323002244675","176041597447011213905846568434353885593","192140250440734827730522807768275624090","209622181404909052778503125009952472768","26917302827441359796968873387668774181","303371249194441847995883568917014149221","205314327064555302956161405005276154933","103375842999584052226589982748145701201","274034072129281086153416572522298828017","11092917724814294085471744071433415307","262886187737575794891282823160749115877","52955313943872216222698014663747991676","221154176673031174601658998538796441752","233730379289940626375101294971820017587","5588438199596187622895187548888396699","316625924918751687177191689765788000611","272774324789815540610589410671347835704","174674226873391824302906698082722536858"],"threshold":0.9},"id":"CVE-2024-31981-52ec9bf0","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"}},{"source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"renderXSLFO"},"deprecated":false,"digest":{"function_hash":"177591156390817839704444691935254914055","length":465},"id":"CVE-2024-31981-586e7b9f","signature_type":"Function","signature_version":"v1"},{"source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"convertToStrictXHtml"},"deprecated":false,"digest":{"function_hash":"41703459756303602656522785024875016391","length":475},"id":"CVE-2024-31981-5d23596c","signature_type":"Function","signature_version":"v1"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"},"deprecated":false,"digest":{"line_hashes":["10509348528298869625935822647600889720","89449116829644455567732850613623003024","34512727029790683694432774419408905664","101086479171495275558525826668753339982","121071341332988723963948067568903408968","276557802328562895430476700579492396530","276081929052408674741787866189817825131","290040289079087560182712151030179501900","144961089154650466220391969644997958258","251381921226099743438789863978571089584","72700462139921336942264343836524458701","323754778321723177491671865475785703610","97214466430139861201614344250804579690","314029889304639225627667363501436021495","24122698124491548302056813441058103303","217686555852293414035698000967692344951","89453818306897104892756371928980694252","145383404622960016543571010554842855119","274028202076065213808455238795674141669","327235049677244780419943594458947801665","218022846306871607468917824443486353421","270239652359824220555832487165001920122","302683090179299608980688589639761822152","185541639468881568606894274959208443860","120135842387424425282075030637841711041","147527045036102780237884530485808640594","57433219418412966194309501305167535851","235140616833794395356959116041765504466","258408662911685076312437097272622263031","43823855765553242443002484462964737330","145705466991588922775616880236041641863","253384436840545937265699284960312081413","334951723073567861563589582863344920112","73341681587324854660107701722572845107","294039701918582965403434757514403859517","292940732203954043507274608716905120558","272845225026625789194138818242840793716","278578452630260763731403312726382139111","138554638364032354066675465437027787645","258219359806401447511639531895912869717","298015165572923592735222106016967340960","214556194053710499403946249114340513057","151579109189184561761291227021909685677","163705505405816821702513961072256701026","123894786232086454580205062416832975335","153943152347686881650796818323002244675","176041597447011213905846568434353885593","192140250440734827730522807768275624090","209622181404909052778503125009952472768","26917302827441359796968873387668774181","303371249194441847995883568917014149221","205314327064555302956161405005276154933","103375842999584052226589982748145701201","274034072129281086153416572522298828017","11092917724814294085471744071433415307","262886187737575794891282823160749115877","52955313943872216222698014663747991676","221154176673031174601658998538796441752","233730379289940626375101294971820017587","5588438199596187622895187548888396699","316625924918751687177191689765788000611","272774324789815540610589410671347835704","174674226873391824302906698082722536858"],"threshold":0.9},"id":"CVE-2024-31981-66ac1ab4","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"},{"source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"getPDFTemplateProperty"},"deprecated":false,"digest":{"function_hash":"177148869857451022214652396380344651544","length":1048},"id":"CVE-2024-31981-80a2b163","signature_type":"Function","signature_version":"v1"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"applyCSS"},"deprecated":false,"digest":{"function_hash":"205800397832702398839903409506395586435","length":1197},"id":"CVE-2024-31981-b2ed59db","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java"},"deprecated":false,"digest":{"line_hashes":["10509348528298869625935822647600889720","89449116829644455567732850613623003024","34512727029790683694432774419408905664","101086479171495275558525826668753339982","121071341332988723963948067568903408968","276557802328562895430476700579492396530","276081929052408674741787866189817825131","290040289079087560182712151030179501900","144961089154650466220391969644997958258","251381921226099743438789863978571089584","72700462139921336942264343836524458701","323754778321723177491671865475785703610","97214466430139861201614344250804579690","314029889304639225627667363501436021495","24122698124491548302056813441058103303","217686555852293414035698000967692344951","89453818306897104892756371928980694252","145383404622960016543571010554842855119","274028202076065213808455238795674141669","327235049677244780419943594458947801665","218022846306871607468917824443486353421","270239652359824220555832487165001920122","302683090179299608980688589639761822152","185541639468881568606894274959208443860","120135842387424425282075030637841711041","147527045036102780237884530485808640594","57433219418412966194309501305167535851","235140616833794395356959116041765504466","258408662911685076312437097272622263031","43823855765553242443002484462964737330","145705466991588922775616880236041641863","253384436840545937265699284960312081413","334951723073567861563589582863344920112","73341681587324854660107701722572845107","294039701918582965403434757514403859517","292940732203954043507274608716905120558","272845225026625789194138818242840793716","278578452630260763731403312726382139111","138554638364032354066675465437027787645","258219359806401447511639531895912869717","298015165572923592735222106016967340960","214556194053710499403946249114340513057","151579109189184561761291227021909685677","163705505405816821702513961072256701026","123894786232086454580205062416832975335","153943152347686881650796818323002244675","176041597447011213905846568434353885593","192140250440734827730522807768275624090","209622181404909052778503125009952472768","26917302827441359796968873387668774181","303371249194441847995883568917014149221","205314327064555302956161405005276154933","103375842999584052226589982748145701201","274034072129281086153416572522298828017","11092917724814294085471744071433415307","262886187737575794891282823160749115877","52955313943872216222698014663747991676","221154176673031174601658998538796441752","233730379289940626375101294971820017587","5588438199596187622895187548888396699","316625924918751687177191689765788000611","272774324789815540610589410671347835704","174674226873391824302906698082722536858"],"threshold":0.9},"id":"CVE-2024-31981-c636f6d6","signature_type":"Line","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"renderXSLFO"},"deprecated":false,"digest":{"function_hash":"177591156390817839704444691935254914055","length":465},"id":"CVE-2024-31981-c6fcaf7e","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73"},{"digest":{"function_hash":"205800397832702398839903409506395586435","length":1197},"id":"CVE-2024-31981-cde246e4","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/a4ad14d9c1605a5ab957237e505ebbb29f5b9d73","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"applyCSS"},"deprecated":false},{"target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/test/java/com/xpn/xwiki/pdf/impl/PdfExportImplTest.java","function":"applyCSSWhenExistingStyleDefinedUsingShorthandNotation"},"deprecated":false,"digest":{"function_hash":"39258519081739396248048319522055033573","length":2728},"id":"CVE-2024-31981-ea73a14f","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9"},{"deprecated":false,"digest":{"length":1048,"function_hash":"177148869857451022214652396380344651544"},"id":"CVE-2024-31981-f9127fdc","signature_type":"Function","signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/480186f9d2fca880513da8bc5a609674d106cbd3","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java","function":"getPDFTemplateProperty"}},{"signature_version":"v1","source":"https://github.com/xwiki/xwiki-platform/commit/d28e21a670c69880b951e415dd2ddd69d273eae9","target":{"file":"xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/pdf/impl/PdfExportImpl.java"},"deprecated":false,"digest":{"line_hashes":["297910231308411585522318552937121803584","123686931569608343004845317044397790834","299876310918596646571044836739436978606","87377755032522861106717120420482666488","246056105141859092301277182219826828227","242827100927113915810995946287179699826","56976229914716193537798674956910859315","69623826686599182113689577754842121553","157349353695492716951431012150862296950","204289282102182074566844251933000343015","293280869484058200992796782355856837264","139492993842826978694756427146997159693","129215223029730488488916422960621850055","265040495165602348073258554735128110808","204754119378577647375076205589723666792","123349505874913035182191895021509004860","284710542290964436937955813563676573026","272021325714976980028446960082267883107","269420992913327537658960344288292005679","59303818158546885007074175770590979501","80712588104888283181930067699385147899","262355431128926193200132911819071129710","82948000697534531630035448950707321302","154616147337310145229929869891551660546","36217403140902486375485059626672181305","282418774148072766794826250908968976371","287997217661933356296393530057418548773","88169740261661082440070086813370977684","273817208824751672231106101176677912995","95816496806954490160028317124427601170","72726379477665200451437490579371794088","245969994292992556064371068706366604701","338220263415733700178095644696437237181","87722940004281089039711765248819731950","173458769242826183307374103662922830188","138227350429573914152027564102734621875","60154878417880309395557686223420587504","269465645328061055073749634915907372951","130395330691738795612979794618643148141","11652451511063461110772798837084339309","98258763075558696121475407121449173978","17131911907199775368719168731710245843","313497039265267887003658335267855961949","306446762743497115061746243076178371971","64579314163914127745991024001698025085","257626561214371232755128016383395050243","21326156200609958175244324460030105986","34076979390226702865530159566756836112","315054396262770642178520173938590230240","135982543847537825818266253440190483369","274605184968798560931339068749396999827","55864105374058543237051091295854487984","178117558519489445597620347675828638316","129578681596213839726512138752193260042","93463057179839376014438057154860530636","176437063742992558072333857434215911174","288454429415839646768730283304568646346","136804928900336950587916637769133385449","37519442031256812383337164439218994203","41685285043491459415741944889597456339","183282389048180052460675809519588277561","277965171614028402289258723404044233380","280513577697226990113883644392628893603","202383496106143073505066758792949540716","337721316323583314056041988413851332064"],"threshold":0.9},"id":"CVE-2024-31981-f95b5693","signature_type":"Line"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}