CVE-2022-0697

Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.

• CWE-601
• CWE-601

• https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574Patch, Third Party Advisory
• https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835bExploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/archivy/archivy/commit/2d8cb29853190d42572b36deb61127e68d6be574Patch, Third Party Advisory
• https://huntr.dev/bounties/2d0301a2-10ff-48f4-a346-5a0e8707835bExploit, Issue Tracking, Patch, Third Party Advisory

Published

Mar 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0691Authorization Bypass Through User-Controlled Key in NPM url-…9.8
• CVE-2022-0692Open Redirect on Rudloff/alltube in Packagist rudloff/alltub…6.1
• CVE-2022-0693The Master Elements WordPress plugin through 8.0 does not va…9.8
• CVE-2022-0694The Advanced Booking Calendar WordPress plugin before 1.7.0 …9.8
• CVE-2022-0695Denial of Service in GitHub repository radareorg/radare2 pri…5.5
• CVE-2022-0696NULL Pointer Dereference in GitHub repository vim/vim prior …5.5
• CVE-2022-0698Microweber version 1.3.1 allows an unauthenticated user to p…6.1
• CVE-2022-0699A double-free condition exists in contrib/shpsort.c of shape…9.8
• CVE-2022-0700The Simple Tracking WordPress plugin before 1.7 does not san…4.8
• CVE-2022-0701The SEO 301 Meta WordPress plugin through 1.9.1 does not esc…4.8
• CVE-2022-0702The Petfinder Listings WordPress plugin through 1.0.18 does …4.8
• CVE-2022-0703The GD Mylist WordPress plugin through 1.1.1 does not saniti…4.8