CVE-2025-23039

Caido is a web security auditing toolkit. A Cross-Site Scripting XSS vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to...

CVE-2025-23039

creationtimestamp| type| source ---|---|--- 2025-01-17 20:17:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113845537620977187 2025-01-17 20:21:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113845552239579550 2025-01-17 20:57:41+00:00| published-proof-of-concept|...

CVE-2025-23039

Caido (web security auditing toolkit) contains a Cross-Site Scripting (XSS) vulnerability in v0.45.0 caused by improper sanitization in the URL decoding tooltip of HTTP request/response editors. This can allow arbitrary script execution and potential theft of sensitive information. The issue is f...