Alpine allows URL access filter bypass

HIGH 7.5CVE-2022-23553 · GHSA-2w4p-2hf7-gh8x · Published 28/12/2022 · updated 17/06/2026

In short

CVE-2022-23553 is a HIGH (CVSS 7.5) vulnerability affecting us.springett:alpine, alpine (alpine project).
Chance of exploitation in the next 30 days (EPSS): 0.91%, higher than 60.1% of all vulnerabilities.
Fix: update to 1.10.4 or later.

Package	Affected versions	Patched versions
us.springett:alpine Maven	`< 1.10.4`	`1.10.4`
alpine alpine_project	`< 1.10.4`	`1.10.4`

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

References

nvd.nist.gov/vuln/detail/CVE-2022-23553 · ADVISORY
stevespringett/Alpine commit a743218 · WEB
stevespringett/Alpine · PACKAGE
stevespringett/Alpine · WEB
stevespringett/Alpine · WEB
stevespringett/Alpine release alpine-parent-1.10.4 · WEB
securitylab.github.com/advisories · WEB
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · ADVISORY
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · Third Party Advisory

More vulnerabilities in us.springett:alpine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

us.springett:alpine

Maven

< 1.10.4

1.10.4

alpine

alpine_project

< 1.10.4

1.10.4

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.