CVE-2025-23039 — MEDIUM (5.2)

Vulnerability Description

Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to the theft of sensitive information. This issue has been addressed in version 0.45.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score

5.2

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-79

References

https://github.com/caido/caido/security/advisories/GHSA-3mfw-fhfp-mgrv

FAQ

What is CVE-2025-23039?

CVE-2025-23039 is a vulnerability with a CVSS score of 5.2 (MEDIUM). Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and respon...

How severe is CVE-2025-23039?

CVE-2025-23039 has been rated MEDIUM with a CVSS base score of 5.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-23039?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.