CVE-2022-23553 HIGH

CVE-2022-23553: URL access filters bypass in Alpine

Vendor Stevespringett

Product alpine

Weakness CWE-863 · Incorrect authorization

Published December 28, 2022

Last update April 10, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

Key dates

02Disclosure timeline

December 28, 2022 CVE published

April 10, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23553 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/863.html