Vulnerabilities

TI-2024-35736 CVE-2024-53274

GHSL-2024-111: Reflected XSS in /home in habitica

MEDIUM 44

Habitica is an open-source habit-building program.

CVSS 4.0LOW 2.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2024-35735 CVE-2024-53273

MEDIUM 56

Habitica is an open-source habit-building program.

CVSS 4.0MEDIUM 5.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2024-35734 CVE-2024-53272

MEDIUM 56

Habitica is an open-source habit-building program.

CVSS 4.0MEDIUM 5.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2022-07247 CVE-2022-23078 · GHSA-mpqq-mgmj-vv8r

LOW 28

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01168 Published 2022-06-22 No fix listed CWE-601

TI-2022-07246 CVE-2022-23077 · GHSA-87gq-2rrf-c96r

LOW 29

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2022-06-22 No fix listed CWE-79