EUVD-2024-2470

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Alpine scaffolding library prior to version 1.10.4 allows URL access filter bypass issue fixed.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-23553	28 Dec 202222:12	–	circl
CNNVD	Alpine 安全漏洞	28 Dec 202200:00	–	cnnvd
CVE	CVE-2022-23553	28 Dec 202218:01	–	cve
Cvelist	CVE-2022-23553 URL access filters bypass in Alpine	28 Dec 202218:01	–	cvelist
Github Security Blog	Alpine allows URL access filter bypass	5 Aug 202421:18	–	github
NVD	CVE-2022-23553	28 Dec 202219:15	–	nvd
OSV	CVE-2022-23553 URL access filters bypass in Alpine	28 Dec 202218:01	–	osv
OSV	GHSA-2W4P-2HF7-GH8X Alpine allows URL access filter bypass	5 Aug 202421:18	–	osv
Prion	Design/Logic Flaw	28 Dec 202219:15	–	prion
Positive Technologies	PT-2022-16068 · Alpine · Alpine	28 Dec 202200:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "ae907b8e-b8c8-34ab-bada-fd7a24625ead",
        "vendor": {
          "name": "stevespringett"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5c6760fa-aa31-3177-b3f2-103d115a8c97",
        "product": {
          "name": "alpine"
        },
        "product_version": "< 1.10.4"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23553
github	www.github.com/stevespringett/Alpine/commit/a7432184b9137ea095799a77f9ced370553acbd7
github	www.github.com/stevespringett/Alpine
github	www.github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java
github	www.github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java
github	www.github.com/stevespringett/Alpine/releases/tag/alpine-parent-1.10.4
securitylab	www.securitylab.github.com/advisories
securitylab	www.securitylab.github.com/advisories/GHSL-2021-1009-Alpine
securitylab	www.securitylab.github.com/advisories/GHSL-2021-1009-Alpine/

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00277

SSVC