CVE-2022-23077

2022-06-2212:15:07

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

CPENameOperatorVersion
habiticaeq3.73.1
habiticaeq4.0.3
habiticaeq4.14.1
habiticaeq4.229.1
habiticaeq4.138.0
habiticaeq4.65.4
habiticaeq4.42.5
habiticaeq4.143.3
habiticaeq3.95.0
habiticaeq4.52.0

Name	Operator	Version
habitica	eq	3.73.1
habitica	eq	4.0.3
habitica	eq	4.14.1
habitica	eq	4.229.1
habitica	eq	4.138.0
habitica	eq	4.65.4
habitica	eq	4.42.5
habitica	eq	4.143.3
habitica	eq	3.95.0
habitica	eq	4.52.0