CVE-2022-23553
published 2022-12-28CVE-2022-23553: Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are…
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.84%
53.2th percentile
Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alpine_project | alpine | < 1.10.4 | 1.10.4 |
| stevespringett | alpine | < 1.10.4 | 1.10.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Alpine allows URL access filter bypass
ghsa·2024-08-05
CVE-2022-23553 [HIGH] CWE-863 Alpine allows URL access filter bypass
Alpine allows URL access filter bypass
Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.
OSV
Alpine allows URL access filter bypass
osv·2024-08-05
CVE-2022-23553 [HIGH] Alpine allows URL access filter bypass
Alpine allows URL access filter bypass
Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java#L107-L121https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java#L115-L127https://securitylab.github.com/advisories/GHSL-2021-1009-Alpine/https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java#L107-L121https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java#L115-L127https://securitylab.github.com/advisories/GHSL-2021-1009-Alpine/
2022-12-28
Published