PT-2025-29521 · Caido · Caido

Amrelsagaei · Published 2025-07-14 · Updated 2025-07-15 · CVE-2025-53834

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Caido versions prior to 0.49.0

Description: Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) issue exists in Caido’s toast UI component. Toast messages may reflect unsanitized user input in tools like Match&Replace and Scope, potentially allowing an attacker to execute arbitrary scripts.

Recommendations: Update to version 0.49.0 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-53834

GHSA-H8JR-C6QQ-H7M7

Affected Products

Caido

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53834.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-53834 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53834 · Security Note
• https://github.com/caido/caido/releases/tag/v0.49.0 · Note
• https://github.com/caido/caido/security/advisories/GHSA-h8jr-c6qq-h7m7 · Note
• https://twitter.com/CVEnew/status/1944893506989998233 · Twitter Post
• https://t.me/cvetracker/27829 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1944918501782626571 · Twitter Post