Authorization Bypass

2022-12-2702:51:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

alpine

authorization bypass

executable war files

blacklisturlfilter

whitelisturlfilter

0.001 Low

EPSS

Percentile

43.5%

JSON

Alpine is vulnerable to authorization bypass.The vulnerability exists in doFilter functions of BlacklistUrlFilter.java and WhitelistUrlFilter.java allows an attacker to bypass administrative restrictions via executable WAR files.

CPENameOperatorVersion
alpinele1.10.2
alpinele1.10.2

CPE	Name	Operator	Version
	alpine	le	1.10.2
	alpine	le	1.10.2

References

github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/BlacklistUrlFilter.java#L107-L121

github.com/stevespringett/Alpine/blob/alpine-parent-1.10.2/alpine/src/main/java/alpine/filters/WhitelistUrlFilter.java#L115-L127

github.com/stevespringett/Alpine/commit/a7432184b9137ea095799a77f9ced370553acbd7

securitylab.github.com/advisories/GHSL-2021-1009-Alpine/

0.001 Low

EPSS

Percentile

43.5%

JSON

Related for VERACODE:38652