PT-2025-4785 · Caido · Caido

0Xwr41Th · Published 2025-01-17 · Updated 2025-01-17 · CVE-2025-23039

Positive Technologies (AI Summary)

CVSS v3.1

5.2

Medium

Base vector

AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Caido version 0.45.0

Description A Cross-Site Scripting (XSS) issue was identified in Caido due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This could allow an attacker to execute arbitrary scripts, potentially leading to the theft of sensitive information.

Recommendations For version 0.45.0, upgrade to version 0.45.1 to address the issue. At the moment, there is no information about other mitigation measures for this vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-23039

GHSA-3MFW-FHFP-MGRV

Affected Products

Caido

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23039.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-23039 · Security Note
• https://osv.dev/vulnerability/CVE-2025-23039 · Vendor Advisory
• https://github.com/caido/caido/security/advisories/GHSA-3mfw-fhfp-mgrv · Note
• https://t.me/cvedetector/15741 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1880388981214392731 · Twitter Post
• https://twitter.com/CVEnew/status/1880384714260820154 · Twitter Post