medium6.1
CVE-2022-23077
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.
Impact
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Habitica | Habitica | from 4.119.0 before 4.233.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/HabitRPG/habitica/commit/5bcfdbe066e8c899f3ecf3fdcdbacc2ecba7f02f
- https://www.mend.io/vulnerability-database/CVE-2022-23077
- https://github.com/HabitRPG/habitica/commit/5bcfdbe066e8c899f3ecf3fdcdbacc2ecba7f02f
- https://www.mend.io/vulnerability-database/CVE-2022-23077