CVE-2022-23078

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page...

CVE-2022-23077

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page...

habitica 输入验证错误漏洞

habitica is an open-source habit-forming program open-sourced by HabitRPG USA. An input validation error vulnerability exists in habitica versions v4.119.0 through v4.232.2. An attacker exploits this vulnerability to open redirects via the login page...