VULNERABILITY INTELLIGENCE

CVE-2022-23078

CVSS score5.8 NONE

EPSS probability1.17%

CISA KEVNot currently listed

Published2022-06-22

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

Weakness classification

vulnerabilitylab@mend.io: CWE-601

Primary references

vulnerabilitylab@mend.io — Patch, Third Party Advisory
vulnerabilitylab@mend.io — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory