CVE-2023-25157

Source
https://cve.org/CVERecord?id=CVE-2023-25157
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-25157.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-25157
Aliases
Published
2023-02-21T21:00:13.392Z
Modified
2026-07-15T01:36:23.752988Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Unfiltered SQL Injection Vulnerabilities in Geoserver
Details

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS) and Web Map Service (WMS) protocols. CQL is also supported through the Web Coverage Service (WCS) protocol for ImageMosaic coverages. Users are advised to upgrade to either version 2.21.4, or version 2.22.2 to resolve this issue. Users unable to upgrade should disable the PostGIS Datastore encode functions setting to mitigate strEndsWith, strStartsWith and PropertyIsLike misuse and enable the PostGIS DataStore preparedStatements setting to mitigate the FeatureId misuse.

Database specific
{
    "cwe_ids": [
        "CWE-89"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25157.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/geoserver/geoserver

Affected ranges

Type
GIT
Repo
https://github.com/geoserver/geoserver
Events
Database specific
{
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:osgeo:geoserver:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.18.7"
        },
        {
            "introduced": "2.19.0"
        },
        {
            "fixed": "2.19.7"
        },
        {
            "introduced": "2.20.0"
        },
        {
            "fixed": "2.20.7"
        },
        {
            "introduced": "2.21.0"
        },
        {
            "fixed": "2.21.4"
        },
        {
            "introduced": "2.22.0"
        },
        {
            "fixed": "2.22.2"
        }
    ]
}

Affected versions

2.*
2.11-beta
2.21-M0

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-25157.json"
vanir_signatures_modified
"2026-07-15T01:36:23Z"
vanir_signatures
[
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 585.0,
            "function_hash": "91802256307116161469384286580598204207"
        },
        "signature_version": "v1",
        "target": {
            "function": "applyOffsetLimit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/OracleDialect.java"
        },
        "id": "CVE-2023-25157-01a826b2"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 1330.0,
            "function_hash": "18218770944982999080769567715364345173"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-01f2740d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 172.0,
            "function_hash": "265344251451037516890487553757512752570"
        },
        "signature_version": "v1",
        "target": {
            "function": "FilterToCatalogSQL",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-09b59c77"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "317961146565049784775414798963699161834",
                "283807000312150068639753571291985183840"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcloader/JDBCLoaderProperties.java"
        },
        "id": "CVE-2023-25157-0a017527"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 205.0,
            "function_hash": "76738972918962406935676278289431837790"
        },
        "signature_version": "v1",
        "target": {
            "function": "testQueryAll",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-145677c2"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 386.0,
            "function_hash": "235625873325333005791611048547424373932"
        },
        "signature_version": "v1",
        "target": {
            "function": "testIsNil",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-16fc172f"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "64310613874368025683066107385007528031",
                "316588331844186578718125916779764469432",
                "277826857610311431470549634520209609701",
                "105764298738169071322247689140973176354",
                "36235352054439308968348499067237200812",
                "125513512924618976404571552672589709822",
                "295506943394842768211113448627503609243",
                "224993213624891508619833445788553879684",
                "66896170970824711838647042917158980182",
                "78603619387646700530427675598310735262",
                "4577248870170635697839481489990191202",
                "253449491185219509732811996447487881870",
                "144595270623880607625657678700278985419",
                "271757471010615932926547619446890611369",
                "174990288938766641985335784741211251135",
                "203672505991129634936874571912366459393",
                "203428506074151522531645219675565129482",
                "163647800144598691204707518769343354443",
                "259005657293947508668710230080861632754",
                "241655620030814951596453113854903673516",
                "194863972395296000441185507381913577793",
                "38918392810866535553561743391251497311",
                "110622612642185920503528192653662070008",
                "250497192704177605387473224158287383776",
                "75748745582186652734869281953444564734",
                "90977661303946509229604607320146997480",
                "235303332455523932405266681885747984811",
                "189236848372759347129123593038956657157",
                "47411846142591434059169011169000069065",
                "138520643765168329110470405698821518608",
                "179981638760880671295835214246376392628",
                "37882180929123143598809887615503997",
                "1517611485113563500884688502010957371",
                "75748745582186652734869281953444564734",
                "79883943101871890545421556433419511363",
                "320330948481125885971662106549956151235",
                "75516359416367493753805774457997668199",
                "305679838807025089537143832812632091681",
                "275430495863461301796532880274761297958",
                "333813652314494114888891497007305152283",
                "205341038875056651751109433782478575383",
                "96097867034855240296847791221663097167",
                "75748745582186652734869281953444564734",
                "246350269841439011741658834396618580857",
                "247157764628063290594792761139401585851",
                "295743717058370794221403846569596354296",
                "325033510140551817842859552757159389695",
                "123893782744574124600244957446650631910",
                "85410196778815815030371940434967236124",
                "21711250185736251621371878456168336898",
                "62518843508917542786898994699787236575",
                "324410125370464030317420389200435937785",
                "173170954613645368328752923069574388013",
                "195485054037675008654324568626987401578",
                "262699698714256081942963665421016327707",
                "246350269841439011741658834396618580857",
                "247157764628063290594792761139401585851",
                "295743717058370794221403846569596354296",
                "325033510140551817842859552757159389695",
                "123893782744574124600244957446650631910",
                "85410196778815815030371940434967236124",
                "21711250185736251621371878456168336898",
                "16130784555873822365376086412141825920",
                "34803027031875497702932729391181786232",
                "147403972496177444629433316491105939044",
                "14229532577866977128553297642372803725",
                "200574907256997593247454566552802031087",
                "163647800144598691204707518769343354443",
                "74716605835259376309481381332797403815",
                "294283807233904412299056014535117247765",
                "263840026438474472646576672770044992658",
                "219147094902812178229255496995029488076",
                "4457366555601916997367272018248230422",
                "271959337456143630881719997780380022191",
                "249279794614351828415888501164253570878",
                "43806241203026030504933729529162062317",
                "139435722926808379637633560552030293577",
                "34286744826754920876868993809944669743",
                "316714462266096311927022788928640485029",
                "301117290117299507951233305957034372850",
                "163647800144598691204707518769343354443",
                "74716605835259376309481381332797403815",
                "268449379473837538344923035897051100",
                "61655505715031637393672598227567966313",
                "100350021458391492734502613834015537444",
                "263063942040987037647621060174204184160",
                "194026065196602169530660384277634203388",
                "50882171278889652675996491036307661601",
                "310311992941303805705679736086109159582",
                "85117970701326244732451952816063158164",
                "163647800144598691204707518769343354443",
                "74716605835259376309481381332797403815",
                "268557559991935755356049397266574913622",
                "151061475211615354915989224429653399900",
                "125963816519948065833435942862121776898",
                "153054308866427569917204451886880577313",
                "69896059511149479900764133254737478786",
                "42698257189630624623096754922998253894",
                "84151856527020724140776660091402609419",
                "187380926868565267331911785484481486723",
                "180463680137591268353870317579392112309",
                "136104391295302682380089200410245027359",
                "144124187175366162128363373341397158863",
                "85117970701326244732451952816063158164",
                "163647800144598691204707518769343354443",
                "74716605835259376309481381332797403815",
                "180747417953343847619597508703800262165",
                "189537465027731340579665223909647346299",
                "168970692974873898934510130937750726400",
                "201953000479828053468107005068123531553",
                "264482336258619122954512618528875199979",
                "310690434228262064752663753731248225416"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-1b3c3815"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 237.0,
            "function_hash": "21108653199679484671262326302093694215"
        },
        "signature_version": "v1",
        "target": {
            "function": "testSort1",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-223b8b19"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 1275.0,
            "function_hash": "150902907440324821045217229595127478330"
        },
        "signature_version": "v1",
        "target": {
            "function": "buildWhereClause",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"
        },
        "id": "CVE-2023-25157-2a4044fe"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 2644.0,
            "function_hash": "47953061768207855169419722563474244701"
        },
        "signature_version": "v1",
        "target": {
            "function": "query",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-4108c859"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 1369.0,
            "function_hash": "334900999823082935218102351960379748775"
        },
        "signature_version": "v1",
        "target": {
            "function": "queryIds",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-46c811f0"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "11390585830861352739577765193996750609",
                "141118312475347008728668444972697623440",
                "284094102341304025777017356135617158311",
                "100931158021554910738547471580253444343",
                "92765066225714935304643049789530349719",
                "336312440219729713664949034269338751712",
                "102903920817022778025523815322259662084",
                "48887058681269051957029161773299741778",
                "135858525027308184897719497507601752731",
                "256304743440348318773243931772931761725",
                "283874122164524960681659168171857932981",
                "210111825000737090489807091697999079147",
                "226123482547084658414747234453639977519",
                "269262737192817928109593858770436457772"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/Dialect.java"
        },
        "id": "CVE-2023-25157-4907a1f9"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 680.0,
            "function_hash": "229473913925242779534045213885541492244"
        },
        "signature_version": "v1",
        "target": {
            "function": "build",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"
        },
        "id": "CVE-2023-25157-491b9bd1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 331.0,
            "function_hash": "69425298391506993838114443564173185854"
        },
        "signature_version": "v1",
        "target": {
            "function": "testIsInstanceOf",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-53bf67f2"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "42284839936145831507334355821296921243",
                "152170266996909938972373870066966032245",
                "243004994776835803918854413521392660200",
                "263655907155131472435009249293470375146",
                "165509597340729998494020297351121288362",
                "233737483970846850004638374087148571821",
                "235136524354573842425441904366883913181",
                "146322212699917854743798648541108875439",
                "73024333321212068336095827341055369004",
                "97229828231416877532185062890459389887",
                "199049345196991607038132946303366285953",
                "76868861226179479971278714008178152814",
                "247097671960643256884546253709343913853",
                "169718759434261847387129451368828144647",
                "191094161433495933878307766769192928014",
                "114320551527814471746671980385707352772",
                "167941882043273757375698743380499256691",
                "20814017000477701827056007674470214177",
                "173185936874193529191062559786792523117",
                "217539069598480467724852696924709449833",
                "308698845319438024987104898082496651244",
                "179266922343210723454901733993288703692",
                "308651014868020457109475783114328953253",
                "284782675215453773215467245561518672689",
                "155642930483750859128462927999708195967",
                "35768487078582324345451314584948472064",
                "203557795192904300313367147081001905763",
                "316492934602523982954773838419447719573",
                "166484608093700523692996098542827299314",
                "303343660027565563385090888590595003150",
                "45318883547137510288645200308707191022",
                "104593172806922888461688826387684507487",
                "313204178531278833787816217403926634343",
                "221871939985263877784239690244237151423",
                "286356167998952338896002876367958134572",
                "162232735539699532615320155292084331655",
                "72323147263639847244641550697000098518",
                "63554622149139053139008936477855683389",
                "221716884711376772942152493806801010428",
                "184142597016894635757702238839979489342",
                "308093468304745456856209100641855564587",
                "125910534694973924313475636529356345565",
                "190073706014396484464761288485160911745",
                "265844771922445117799911661043021500237",
                "148416662975223822635129287446019771617",
                "235286196077772804856922866374271342583",
                "61412762918626624226705261781357300747",
                "127400611530250232104644550008238936594",
                "281812948233866395110412396117742344432",
                "269366564673577212171973363815840082711",
                "258955225060154685903162754578009659167",
                "214656623888425469108906940750986334780",
                "257437869989991022747265626424251565197",
                "90009252734231959760152593246109199368",
                "259992332331844117866155412423554459554",
                "187826215562251668390580965208243015186",
                "214044104878430470918893404110372602753",
                "211761836810128888275382086313177016063",
                "29170465571647659759863911679865727924",
                "268990320379268246203992289704784108868",
                "310162217444343019353292625047301706749",
                "290497731950616099750461290429350896769",
                "303403953045447684810786983468188353514",
                "90686201542339963853830646387422211993",
                "225540491758408583744915933123317951422",
                "167194482983045049131121765906882697646",
                "219931747329763900983429556043713240026",
                "159246404141585334907905470675591195998"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"
        },
        "id": "CVE-2023-25157-5424160b"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 120.0,
            "function_hash": "33720478658561701793247715535226028654"
        },
        "signature_version": "v1",
        "target": {
            "function": "dialect",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-6118f3a9"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "228348215429215526419135979022875812",
                "242021834607453602332829451914827073765",
                "155451949499882935358590776548388319253",
                "183882441931191987473386137360362487833",
                "145304530042032263075966785963992344068",
                "240842924111344282179442407386033765130",
                "256354659300438983693842549234083421632",
                "304610183545893049067750821810784493130",
                "230048792002889749716980201703207008582"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/OracleDialect.java"
        },
        "id": "CVE-2023-25157-63204ddb"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 330.0,
            "function_hash": "28780885622107722891154158379397932643"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-6e0e7c1a"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 435.0,
            "function_hash": "330314054368860616946146569385154575164"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-6e7c2c33"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 324.0,
            "function_hash": "131043723115324882667081549110777174651"
        },
        "signature_version": "v1",
        "target": {
            "function": "detect",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/Dialect.java"
        },
        "id": "CVE-2023-25157-768b611c"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 110.0,
            "function_hash": "188177864093899086253037928130281368349"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-7ab499ac"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 986.0,
            "function_hash": "174144131377644232396529865368357979414"
        },
        "signature_version": "v1",
        "target": {
            "function": "count",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-7ea779a4"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 86.0,
            "function_hash": "307415710314258654188744990275243382680"
        },
        "signature_version": "v1",
        "target": {
            "function": "ConfigDatabase",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-8b770f32"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "196590214877542010649512489543078070495",
                "27074876639885036695735604286499394638",
                "257875272864951129168213679885975395341",
                "205920716369915455375618038270301937002",
                "259478425870235435794018994403028648680",
                "46000309983221428071247380525888407783",
                "22040097978273525681917994126128435722",
                "91646455011344759735426134467183432502"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/JDBCConfigTestSupport.java"
        },
        "id": "CVE-2023-25157-95f8d98d"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 156.0,
            "function_hash": "267898855118706775301429961450925566947"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-9a356116"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 271.0,
            "function_hash": "4941677207787540342876310538229582759"
        },
        "signature_version": "v1",
        "target": {
            "function": "testSort2",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-9e27025f"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 442.0,
            "function_hash": "125370331033763173560582449511898807679"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-9f03e7ae"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 110.0,
            "function_hash": "257610976538751402879609248632807507436"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-a4c4caa0"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 472.0,
            "function_hash": "3871907045264911584625640530907467829"
        },
        "signature_version": "v1",
        "target": {
            "function": "testIsNull",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-a53a91e3"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 1438.0,
            "function_hash": "181355372553409073930778319585173171791"
        },
        "signature_version": "v1",
        "target": {
            "function": "querySortBy",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/QueryBuilder.java"
        },
        "id": "CVE-2023-25157-a68f88ee"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 423.0,
            "function_hash": "244649586545139512157181336767084946296"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-b8d0a6b1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 2920.0,
            "function_hash": "69182911191203396811068776856211672904"
        },
        "signature_version": "v1",
        "target": {
            "function": "visit",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-ba5430f9"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 321.0,
            "function_hash": "271696332402165130429957133813034510255"
        },
        "signature_version": "v1",
        "target": {
            "function": "testSort3WithFilter",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-bfdd7d17"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 362.0,
            "function_hash": "113586329994405796709138630237485946659"
        },
        "signature_version": "v1",
        "target": {
            "function": "handleInstanceOf",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-c03def4c"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 305.0,
            "function_hash": "244351918849134611421195100575428614032"
        },
        "signature_version": "v1",
        "target": {
            "function": "testSort3",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-c542f120"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 269.0,
            "function_hash": "83332967385382329256979680448040722220"
        },
        "signature_version": "v1",
        "target": {
            "function": "setUp",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-c573750a"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "142271494971195699056263425483150790214",
                "224586210592102339894185306519237675713",
                "300583695589433988635113548041817173885",
                "200901449861271985344905895590590380862",
                "109514712855518934124768135680978385894",
                "337946514552037680530000978805380497230",
                "86381973531271177404878594317952636697",
                "335276966632064354272853715707176264812",
                "17202712478396485947844643041797338911",
                "132493253786237720427490736646252334595",
                "285580071551318954091289523305380841432",
                "37037593325543636136990370826182530802",
                "4100908194664371372092858280301155752",
                "198118148584837889211564053436563165411",
                "130739438786488331265680399431678386982",
                "54604281362842146619852662164492301488",
                "142722510094650861984149893752956497536",
                "165462529439979293443631440385720265398",
                "125362077730164574614930508742754450676",
                "281568999191843051570325240249312790022",
                "205304301790305467386190679291397629108",
                "218240644819087053841623363431102436439",
                "57061743209900962762025532236609144923",
                "253811214176445028599370452719299604882",
                "19712151940296576769039653259277688041",
                "287184449285677035147206704514526762580",
                "13606077513413489858137346209998326544",
                "256455841378294257780577844518944501608",
                "102164827465470062792222716593077115917",
                "240910132807439779817247244656843449616",
                "248273761234253109105449276226470378076",
                "338914240087410314078142567744921621725",
                "161457192666224752235019505690258551798",
                "82332786934783919398977985183760537327",
                "262390994545990129987275399442275253502",
                "127943257874713266821958663445306471316",
                "253349718169420529813054329554876498184",
                "201300576178640251598961755041048005558",
                "315126050829863397481738101109314741774",
                "245620006815055486849390384864937129957",
                "300554253588166478991992915761731505159",
                "261804811543768509766962862544287087204",
                "242398846556612196019630295904812135406",
                "127943257874713266821958663445306471316",
                "253349718169420529813054329554876498184"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-ce810a17"
    },
    {
        "deprecated": false,
        "signature_type": "Line",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "line_hashes": [
                "261216384066153937671249948995728548061",
                "56952663401007177135506848476169354590",
                "15282067845559452977615407600222250215",
                "268301147238335166497301834486078642680",
                "37472330529006274106764735460154671717",
                "228099433135740901648370130604358770590",
                "46129994213942073777535623298189466503",
                "125021200729919637931905009367394855791",
                "15601602431209337148070002165506085248",
                "234385641721370470087118434997001212415",
                "175905188422221838275768962234191396980",
                "151482677433911766663215111260563906354",
                "220265750862979168545797254406413369581",
                "77641858119472096007166009783670367224",
                "201013143130955304195661547372506927346",
                "15373100407310897012009303795351322597",
                "104526400678035138264093667721927174896",
                "236699988453944309606401560043949350938",
                "261389108867009849369288305708901572539",
                "335448625717526983159834075532593946449",
                "68637767803453442829513534125084775368",
                "174156968999241862966420588386298072116",
                "151397559176880648043030296281833776056",
                "237720448948462426598684037544537583505",
                "195726193653773250798282090893426252990",
                "139896480068574272769478188870895781771",
                "188681826026848810277659693211012681860",
                "299343170493088743204410053229905494550",
                "208826204457710709545207784661426658165",
                "336621448345830662111162584731065569664",
                "168412333935054065278547248293712540732",
                "265387129730349773848107981135065985474",
                "289451275845980783258008201678818297983",
                "22541671181231378474178704047146607405",
                "185848228913088378843996911648492689812",
                "127079149475251296675498512192973054717",
                "111441107857766189401560501713582369366",
                "195117313585363641686781406391948093691",
                "244044065252987239459283157897350912568",
                "72890183272683650298622597835768259467",
                "194644924733513012259752496085723668125",
                "253474736573303147397584213114222213151",
                "236558019009052042421087771527190501527",
                "297430049725829822937104949541962929560",
                "93595660470280799675284274148211514570",
                "241779472436095349309843052929886367697",
                "319944348045568013933090153329811335495",
                "299232605435093084142790991738681016666",
                "28388413982784288571574660185222140433",
                "54810736798651734521325030356987393113",
                "265387129730349773848107981135065985474",
                "289451275845980783258008201678818297983",
                "22541671181231378474178704047146607405",
                "185848228913088378843996911648492689812",
                "127079149475251296675498512192973054717",
                "293344308107926605549407484259074046500",
                "48619023061676813771522026724683928210",
                "332580440765047312830043219300491514625",
                "78745541802266269769713121323283867529",
                "194644924733513012259752496085723668125",
                "253474736573303147397584213114222213151",
                "269532064734375133423266443239579342571",
                "277667494406956300671411776836417387801",
                "319809089687551418666807947636876510776",
                "131467620252152549954066206195440044341",
                "319944348045568013933090153329811335495",
                "299232605435093084142790991738681016666",
                "28388413982784288571574660185222140433",
                "54810736798651734521325030356987393113",
                "265387129730349773848107981135065985474",
                "289451275845980783258008201678818297983",
                "22541671181231378474178704047146607405",
                "185848228913088378843996911648492689812",
                "127079149475251296675498512192973054717",
                "293344308107926605549407484259074046500",
                "48619023061676813771522026724683928210",
                "27754468511866524113230674035231684837",
                "210078009088521526354169236858922796590",
                "297013111468792245647721139256923201063",
                "71213268640848418420524597456577717719",
                "234403942655290419574547853613756855981",
                "19820798872077551136543814938250137657",
                "288066413115903900930069035475353656271",
                "97409769641929344419304561308643706998",
                "167378733889959668246998331448004492169",
                "1174536420472219303074954704939984157",
                "337014123491082209481288595105496845668",
                "333985588243726457942233678301312060819",
                "24303535667344293376388705129736533796",
                "183594842233994274610166254623412748160",
                "247927639867169451080478728483106771263",
                "206663550664240698778138722435945771440",
                "298890413472401394934858153207084260746",
                "210838398058396033446847334272031674905",
                "298825152364664415186227004017140422420",
                "82822542511531603675880858981541684093",
                "324565227219232026991996066895532715180",
                "9589092379828466842482644922346581413",
                "292917135946717708463015898715567495612",
                "139896480068574272769478188870895781771",
                "188681826026848810277659693211012681860",
                "117585444490306724806214768900055886510",
                "2336877536424243117749445848978471433",
                "171322524026072457106374300456932193972",
                "34543411329608621421276876064208947881",
                "75486994529588502213800051017588577422",
                "192445386993118663751639709065366458869",
                "154091367907782769933965372581155058428",
                "243711665414250609914417424260395464522",
                "244986098293676426565075353317393440522",
                "253474736573303147397584213114222213151",
                "236558019009052042421087771527190501527",
                "297430049725829822937104949541962929560",
                "93595660470280799675284274148211514570",
                "241779472436095349309843052929886367697",
                "92685542349496479583706875853846299764",
                "24617316411714953445709780240446852915",
                "112028848543822738308915266707772584962",
                "202864660755172342693488763996015348031",
                "23743038151866320551355358194903675577",
                "89416891715437045279158684410180256361",
                "277737528743421088686625526533067505156",
                "150091020381440984924172528984949953444",
                "244986098293676426565075353317393440522",
                "253474736573303147397584213114222213151",
                "269532064734375133423266443239579342571",
                "277667494406956300671411776836417387801",
                "319809089687551418666807947636876510776",
                "131467620252152549954066206195440044341",
                "92685542349496479583706875853846299764",
                "24617316411714953445709780240446852915",
                "112028848543822738308915266707772584962",
                "202864660755172342693488763996015348031",
                "23743038151866320551355358194903675577",
                "89416891715437045279158684410180256361",
                "262714632107718302358224309809335048859",
                "154503017353587539420150011524001285506",
                "70654025831977210830190821734437091670",
                "149974932848721872878372450748949336743",
                "288066413115903900930069035475353656271",
                "97409769641929344419304561308643706998",
                "167378733889959668246998331448004492169",
                "1174536420472219303074954704939984157",
                "239794410055181504635583675491987139988",
                "32546936829648873032771404989387852091",
                "219350823035060613735777157206559127793",
                "286937312459701642579637288360869305305",
                "191807256602110814552169904452987592224",
                "14471517480790908910916764886781037904",
                "172238782073441923836619147650658864394",
                "173138183438937538590133258048815276145",
                "70330778558107713693688123576921246015",
                "257413726780481768674070845989074152199",
                "73316504408194853523621201837502423140",
                "288258759040042017911461344619176981664",
                "245198683850319127063174665832580215886",
                "299720958538902863075388953019638808490",
                "328696077817158780327775707332328060366",
                "237300700207380990778931093278830106969",
                "31359407006662564697954492758190064421",
                "93803152502750036716750902914328301553",
                "239471046892171315460609414111197756239",
                "153629295046931122936168287493402585553",
                "95594289335491740980167659740692085548",
                "195726193653773250798282090893426252990",
                "139896480068574272769478188870895781771",
                "188681826026848810277659693211012681860",
                "117585444490306724806214768900055886510",
                "2336877536424243117749445848978471433",
                "171322524026072457106374300456932193972",
                "34543411329608621421276876064208947881",
                "123354740834881056172078884432972942186",
                "72392258668406095457597014935274189888",
                "235688399132817843816052176967363463553",
                "119928501952195499569227342921420831728",
                "318710452009306785546868435321585210930",
                "79118186506499747914579858050262466382",
                "236558019009052042421087771527190501527",
                "297430049725829822937104949541962929560",
                "93595660470280799675284274148211514570",
                "241779472436095349309843052929886367697",
                "92685542349496479583706875853846299764",
                "24617316411714953445709780240446852915",
                "112028848543822738308915266707772584962",
                "202864660755172342693488763996015348031",
                "54964845928320202192063606955748222402",
                "244238835522243289140205744600630824719",
                "224745994151298515361266966737181436300",
                "41998650419241433971506464299029547834",
                "318710452009306785546868435321585210930",
                "79118186506499747914579858050262466382",
                "269532064734375133423266443239579342571",
                "277667494406956300671411776836417387801",
                "319809089687551418666807947636876510776",
                "131467620252152549954066206195440044341",
                "92685542349496479583706875853846299764",
                "24617316411714953445709780240446852915",
                "112028848543822738308915266707772584962",
                "202864660755172342693488763996015348031",
                "54964845928320202192063606955748222402",
                "244238835522243289140205744600630824719",
                "325191024643180429528630316720728531570",
                "193256654447622767005314826936225757043",
                "111910740752573138402528258695615327718",
                "158735758664918154090938710522354120924",
                "156620472235128322729773304457750804073",
                "288066413115903900930069035475353656271",
                "97409769641929344419304561308643706998",
                "167378733889959668246998331448004492169",
                "1174536420472219303074954704939984157",
                "239794410055181504635583675491987139988",
                "251161423397965712107027131933870857015",
                "145395517544044884072128023575870673220",
                "195817229419261956073024304773309853555",
                "336677109514545121917693703414544952925",
                "70075055841339162972051542614839478456",
                "322117044062853598252325964056122129610",
                "300671272767286288331470251241142195753",
                "25052084581219249576932733804090869062",
                "24131030700504388923302612112752857264",
                "99823269396607217030638067524989965839",
                "182514633748148475231372437313033823432",
                "134319561083711280447969963474647257889",
                "332358929850894956839937038309684400333",
                "123453931969777868780195769594721068021",
                "90741029386870831107886485651549192630",
                "9959875300491582295410413602235365945",
                "247759089051649887142873928803499369641",
                "162278997098518374491985713813404182831",
                "86868993845830183200181550460914775019",
                "24874324394389278912468981590425635644",
                "120861368980238786376918530075699866493",
                "334648681928664850545033044386234088696",
                "148035133013483717802266797527120716128",
                "125658595138786344480752652256365199172",
                "270588191625886862551714930155884186189",
                "99823269396607217030638067524989965839",
                "168639852334027131764433242316426018814",
                "37711479433665690582426544037849453253",
                "1436636349215198774125521518413248012",
                "15751899141255774125688380948833984469",
                "90741029386870831107886485651549192630",
                "9959875300491582295410413602235365945",
                "247759089051649887142873928803499369641",
                "239256570092715777071667911925904092601",
                "132505673389539316407045301806590996060",
                "93114995798125954723018484881236769727",
                "325809620666755710445889378320351545789",
                "103013117935147301130754345561195418158",
                "85702809122103453813430699094939578791",
                "325455210331063982409550913124663989313",
                "47360160144562486504712481945462684067",
                "240125324846648742936961458068853011990",
                "63907035335262837148414257723740165885",
                "180058005656278716538308583173626534525",
                "20160812320716710730921412631026893582",
                "117245279556930885192686743220624727664",
                "649211954517503745037357234112854025",
                "199046476913141471846748073713282933409",
                "48483587612260844228236444068719054558",
                "275865396426800427610203329847147959406",
                "82171436678954901493959323126373213194",
                "211148389903838282302524210592244105652",
                "138033048617048179549039459634505892240",
                "154096351655424934045838379654816353180",
                "47360160144562486504712481945462684067",
                "240125324846648742936961458068853011990",
                "131707824069761395093975952218219444618",
                "24617316411714953445709780240446852915",
                "212472408326301647111936716383730975939",
                "207758170864742530004505975082558301022",
                "160085253955745538614131743526968185745",
                "16257523275639054738792845495559257945",
                "82171436678954901493959323126373213194",
                "211148389903838282302524210592244105652",
                "230492467339680616668741686838110240137"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "target": {
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/FilterToCatalogSQL.java"
        },
        "id": "CVE-2023-25157-de4da8b1"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 94.0,
            "function_hash": "297680084188835812588151844700475328597"
        },
        "signature_version": "v1",
        "target": {
            "function": "configDatabase",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/JDBCConfigTestSupport.java"
        },
        "id": "CVE-2023-25157-e704906c"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 386.0,
            "function_hash": "199489663898351362392379024411406808626"
        },
        "signature_version": "v1",
        "target": {
            "function": "testNotEquals",
            "file": "src/community/jdbcconfig/src/test/java/org/geoserver/jdbcconfig/internal/QueryBuilderTest.java"
        },
        "id": "CVE-2023-25157-fe2852c7"
    },
    {
        "deprecated": false,
        "signature_type": "Function",
        "source": "https://github.com/geoserver/geoserver/commit/145a8af798590288d270b240235e89c8f0b62e1d",
        "digest": {
            "length": 575.0,
            "function_hash": "173907107439358603838367028787844104378"
        },
        "signature_version": "v1",
        "target": {
            "function": "ConfigDatabase",
            "file": "src/community/jdbcconfig/src/main/java/org/geoserver/jdbcconfig/internal/ConfigDatabase.java"
        },
        "id": "CVE-2023-25157-fe380e2a"
    }
]