The following table lists the changes that have been made to the
CVE-2025-23039 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received
by [email protected]Jan. 17, 2025
Action Type Old Value New Value Added Description Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to the theft of sensitive information. This issue has been addressed in version 0.45.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Added CVSS V3.1 AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N Added CWE CWE-79 Added Reference https://github.com/caido/caido/security/advisories/GHSA-3mfw-fhfp-mgrv