TI-2022-07606 CVE-2022-23553 · GHSA-2w4p-2hf7-gh8x
URL access filters bypass in Alpine
Priority HIGH 72
Alpine is a scaffolding library in Java.
Alpine Project
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Alpine Project records in CISA KEVNo Alpine Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Alpine · all components
TI-2020-11740 CVE-2020-14929 · GHSA-2h9h-wfvh-5r96
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent…
Priority LOW 37
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letti…
TI-2022-07607 CVE-2022-23554 · GHSA-whr2-9x5f-5c79
Authentication bypass in Alpine
Priority LOW 36
Alpine is a scaffolding library in Java.
TI-2021-15974 CVE-2021-38370 · GHSA-2c2h-qvww-cw95
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
Priority LOW 30
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
TI-2021-21535 CVE-2021-46853 · GHSA-v9q2-jxcm-rm4c
Alpine before 2.25 allows remote attackers to cause a denial of service (application…
Priority LOW 29
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.