CVE-2022-23553: GHSL-2021-1009: URL access filters bypass in Alpine - CVE-2022-23553
Published Dec 22, 2022
·Updated
Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.
Other sources
URL access filters (block and allow list) are subject to be bypassed
— GitHub Security Lab
Affected Software
2 affected componentsFixes available
maven/us.springett:alpine<1.10.4
1.10.4
Alpine Project Alpine<1.10.4
Event History
Dec 22, 2022
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
Description
Dec 28, 2022
CVE Published
via MITRE·06:01 PM
Data Sourced
via MITRE·06:01 PM
DescriptionSeverityWeakness
Aug 5, 2024
Advisory Published
via GitHub·09:18 PM
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-23553.
2
What is the severity of CVE-2022-23553?
The severity of CVE-2022-23553 is high with a CVSS score of 7.5.
3
What is the affected software of CVE-2022-23553?
The affected software of CVE-2022-23553 is Alpine prior to version 1.10.4.
4
How can I fix CVE-2022-23553?
You can fix CVE-2022-23553 by updating Alpine to version 1.10.4 or later.
5
Are there any known workarounds for CVE-2022-23553?
There are no known workarounds for CVE-2022-23553.