Alpine allows URL access filter bypass

높음 7.5CVE-2022-23553 · GHSA-2w4p-2hf7-gh8x · Published 28/12/2022 · updated 17/06/2026

요약

CVE-2022-23553은(는) us.springett:alpine, alpine (alpine project)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.91%, 전체 취약점의 60.2%보다 높음.
조치: 1.10.4 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
us.springett:alpine Maven	`< 1.10.4`	`1.10.4`
alpine alpine_project	`< 1.10.4`	`1.10.4`

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

References

nvd.nist.gov/vuln/detail/CVE-2022-23553 · ADVISORY
stevespringett/Alpine commit a743218 · WEB
stevespringett/Alpine · PACKAGE
stevespringett/Alpine · WEB
stevespringett/Alpine · WEB
stevespringett/Alpine release alpine-parent-1.10.4 · WEB
securitylab.github.com/advisories · WEB
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · ADVISORY
securitylab.github.com/advisories/GHSL-2021-1009-Alpine · Third Party Advisory

us.springett:alpine의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

us.springett:alpine

Maven

< 1.10.4

1.10.4

alpine

alpine_project

< 1.10.4

1.10.4

Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

NVD description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.