Alpine Project Alpine
5 CVEs affecting Alpine Project Alpine. Latest disclosed: 2022-12-28. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-23553 | High | 7.5 | 2022-12-28 | Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are… |
CVE-2020-14929 | High | 7.5 | 2020-06-19 | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure beha… |
CVE-2022-23554 | Medium | 6.5 | 2022-12-28 | Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The AuthenticationFilter relies on the request URI… |
CVE-2021-46853 | Medium | 5.9 | 2022-11-03 | Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS. |
CVE-2021-38370 | Medium | 5.9 | 2021-08-10 | In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS. |