Design/Logic Flaw

2022-12-2819:15:00

PRIOn knowledge base

www.prio-n.com

alpine

java

scaffolding

library

url access filter bypass

issue

fixed

0.001 Low

EPSS

Percentile

43.5%

JSON

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

CPENameOperatorVersion
alpinelt1.10.4

CPE	Name	Operator	Version
	alpine	lt	1.10.4

References

github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java

github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java

securitylab.github.com/advisories/GHSL-2021-1009-Alpine/

0.001 Low

EPSS

Percentile

43.5%

JSON

Related for PRION:CVE-2022-23553