CVE-2022-23078

habitica 4.119.0-4.232.2 - Open Redirect via Login Page

Title source: llm

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

Core 2

Core References

Patch, Third Party Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

EPSS 0.0108

EPSS Percentile 60.9%

CWE

CWE-601

Status published

Products (1)

habitica/habitica 4.119.0 - 4.233.0

Published Jun 22, 2022

Tracked Since Feb 18, 2026