CVE-2022-23553CWE-863

URL access filters bypass in Alpine

High · published December 28, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00879 · 58.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-12-28T18:01Z
EPSS history
Timeline
  • 28 DEC 18:01Z
    URL access filters bypass in Alpine
    cvelistv5