Alpine allows URL access filter bypass

HOCH 7.5CVE-2022-23553 · GHSA-2w4p-2hf7-gh8x · Published 28/12/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-23553 ist eine Schwachstelle (HOCH (CVSS 7.5)) in us.springett:alpine, alpine (alpine project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.91%, höher als bei 60.2% aller Schwachstellen.
Abhilfe: auf 1.10.4 oder neuer aktualisieren.

Package	Affected versions	Patched versions
us.springett:alpine Maven	`< 1.10.4`	`1.10.4`
alpine alpine_project	`< 1.10.4`	`1.10.4`

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

References

nvd.nist.gov/vuln/detail/CVE-2022-23553 · ADVISORY
stevespringett/Alpine commit a743218 · WEB
stevespringett/Alpine · PACKAGE
stevespringett/Alpine · WEB
stevespringett/Alpine · WEB
stevespringett/Alpine release alpine-parent-1.10.4 · WEB
securitylab.github.com/advisories · WEB
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · ADVISORY
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · Third Party Advisory

Weitere Schwachstellen in us.springett:alpine

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

us.springett:alpine

Maven

< 1.10.4

1.10.4

alpine

alpine_project

< 1.10.4

1.10.4

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.