GCVE - cpe:2.3:a:stevespringett:alpine:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:stevespringett:alpine:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Stevespringett (`350d1a06-8fcc-57b7-97dc-fe6a9ab56cc5`)
Product	Alpine (`b39869d8-a1dd-5ad4-9967-cdd49a74c97c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-23554`	vulnerable	2026-06-08 05:40:57.754459	Authentication bypass in Alpine MEDIUM (6.5) Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The AuthenticationFilter relies on the request URI to evaluate if the user is accessing the swagger endpoint. By accessing a URL with a path such as /api/foo;%2fapi%2fswagger the contains condition will hold and will return from the authentication filter without aborting the request. Note that the principal object will not be assigned and therefore the issue wont allow user impersonation. This issue has been fixed in version 1.10.4. There are no known workarounds. Published: 2022-12-28T18:12:41.586Z Updated: 2025-04-10T20:25:57.859Z Open on db.gcve.eu Reference links https://securitylab.github.com/advisories/GHSL-2021-1010-Alpine/ https://github.com/stevespringett/Alpine/blob/f03dbda46229c26145a5f9f7f2660cc2c386be02/alpine/src/main/java/alpine/filters/AuthenticationFilter.java#L58-L60 https://github.com/stevespringett/Alpine/releases/tag/alpine-parent-1.10.4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-23553`	vulnerable	2026-06-08 05:40:57.752978	URL access filters bypass in Alpine HIGH (7.5) Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds. Published: 2022-12-28T18:01:14.741Z Updated: 2025-04-10T20:29:58.561Z Open on db.gcve.eu Reference links https://securitylab.github.com/advisories/GHSL-2021-1009-Alpine/ https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java#L107-L121 https://github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java#L115-L127	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Alpine

Notes

PURL mappings

Vulnerability references

Contribute