CVE-2022-23078

Description

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

References

PatchThird Party Advisory
ExploitThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

AccessComplexity

MEDIUM

ConfidentialityImpact

PARTIAL

AvailabilityImpact

NONE

IntegrityImpact

PARTIAL

BaseScore

5.800000190734863

VectorString

AV:N/AC:M/Au:N/C:P/I:P/A:N

Version

2.0

AccessVector

NETWORK

Authentication

NONE