CVE-2022-23078CWE-601

Habitica - Open redirect in login page

published June 22, 2022

CVSS
—
EPSS
1%
Percentile
67.1
In the wild
Unconfirmed
What it is

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01168 · 67.1th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-06-22T12:00Z
EPSS history
Timeline
  • 22 JUN 12:00Z
    Habitica - Open redirect in login page
    cvelistv5