Skip to content

Vendor

us.springett vulnerabilities

2 published CVES affecting us.springett, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of us.springett alerts

Products

Latest us.springett CVEs

Newest publication first

  1. CVE-2022-23554 Authentication bypass in Alpine

    Published
    MediumCVSS 5.4 EPSS 0.72%

    Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The AuthenticationFilter relies on the request URI to evaluate if the user is accessing the swagger endpoint. By accessing a URL with a path such as /api/foo;%2fapi%2fswag...

  2. CVE-2022-23553 URL access filters bypass in Alpine

    Published
    HighCVSS 7.5 EPSS 0.91%

    Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.