Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2022-07247 CVE-2022-23078 · GHSA-mpqq-mgmj-vv8r

Habitica - Open redirect in login page

Priority LOW 28

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01168 Published 2022-06-22 No fix listed CWE-601
TI-2022-07246 CVE-2022-23077 · GHSA-87gq-2rrf-c96r

Habitica - DOM XSS in login page

Priority LOW 29

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2022-06-22 No fix listed CWE-79