CVE-2022-23078: Habitica

Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

Affected products

• Habitica Habitica: from 4.119.0, before 4.233.0 (fixed in 4.233.0)

Published 2022-06-22. Last modified 2026-06-17.