CVE-2022-0122

forge is vulnerable to URL Redirection to Untrusted Site

• CWE-601

• https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5ePatch, Third Party Advisory
• https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4aeExploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/digitalbazaar/forge/commit/db8016c805371e72b06d8e2edfe0ace0df934a5ePatch, Third Party Advisory
• https://huntr.dev/bounties/41852c50-3c6d-4703-8c55-4db27164a4aeExploit, Issue Tracking, Patch, Third Party Advisory

Published

Jan 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0115Uninitialized use in File API in Google Chrome prior to 97.0…8.8
• CVE-2022-0116Inappropriate implementation in Compositing in Google Chrome…4.3
• CVE-2022-0117Policy bypass in Blink in Google Chrome prior to 97.0.4692.7…6.5
• CVE-2022-0118Inappropriate implementation in WebShare in Google Chrome pr…4.3
• CVE-2022-0120Inappropriate implementation in Passwords in Google Chrome p…6.5
• CVE-2022-0121Improper Neutralization of Input During Web Page Generation …8
• CVE-2022-0123An issue has been discovered affecting GitLab versions prior…6.8
• CVE-2022-0124An issue has been discovered affecting GitLab versions prior…4.3
• CVE-2022-0125An issue has been discovered in GitLab affecting all version…4.3
• CVE-2022-0128vim is vulnerable to Out-of-bounds Read7.8
• CVE-2022-0129Uncontrolled search path element vulnerability in McAfee Tec…6.7
• CVE-2022-0130Tenable.sc versions 5.14.0 through 5.19.1 were found to cont…8.1