medium5.8
CVE-2022-23078
In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.
Impact
In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Habitica | Habitica | from 4.119.0 before 4.233.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/HabitRPG/habitica/commit/5bcfdbe066e8c899f3ecf3fdcdbacc2ecba7f02f
- https://www.mend.io/vulnerability-database/CVE-2022-23078
- https://github.com/HabitRPG/habitica/commit/5bcfdbe066e8c899f3ecf3fdcdbacc2ecba7f02f
- https://www.mend.io/vulnerability-database/CVE-2022-23078