{"action":"Upgrade us.springett:alpine to 1.10.4 or later.","affected":[{"fixed":"1.10.4","introduced":"0"}],"component":"us.springett:alpine","cve_ids":["CVE-2022-23554"],"ecosystem":"Maven","epss":0.00716,"exploited":false,"fixed_versions":["1.10.4"],"ghsa_id":"GHSA-whr2-9x5f-5c79","id":"tcs_01M5N9GHX750YY1XBM5DM128GT","modified_at":"2024-08-05T21:58:56.442193Z","published_at":"2024-08-05T21:18:58Z","references":["https://osv.dev/vulnerability/GHSA-whr2-9x5f-5c79","https://nvd.nist.gov/vuln/detail/CVE-2022-23554","https://github.com/stevespringett/Alpine","https://github.com/stevespringett/Alpine/blob/f03dbda46229c26145a5f9f7f2660cc2c386be02/alpine/src/main/java/alpine/filters/AuthenticationFilter.java#L58-L60","https://github.com/stevespringett/Alpine/releases/tag/alpine-parent-1.10.4","https://securitylab.github.com/advisories","https://securitylab.github.com/advisories/GHSL-2021-1010-Alpine"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-whr2-9x5f-5c79","url":"https://osv.dev/vulnerability/GHSA-whr2-9x5f-5c79"}],"summary":"Alpine allows Authentication Filter bypass"}