Cross-Site Scripting Vulnerability in Caido Web Security Auditing Toolkit

CVE-2025-23039

What is CVE-2025-23039?

Caido, a web security auditing toolkit, has a vulnerability that allows for Cross-Site Scripting (XSS) due to inadequate sanitization in the URL decoding feature of HTTP request and response editors. This flaw can enable attackers to execute arbitrary scripts in the context of a user's session, potentially leading to the exposure of sensitive information. Users are strongly encouraged to update to version 0.45.1, where this issue has been resolved. No workarounds are available to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References