CVE-2022-23554

CVE-2022-23554 describes an authentication bypass vulnerability in Alpine, a Java scaffolding library, affecting versions prior to 1.10.4. An attacker can bypass the AuthenticationFilter by manipulating the request URI, specifically when accessing a swagger endpoint, allowing unauthorized access to certain functionalities. This vulnerability is rated Medium (CVSS 5.4) due to its network-based attack vector and low attack complexity, potentially leading to limited confidentiality and integrity impacts without user impersonation. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.