{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-18T05:01:14.615","vulnerabilities":[{"cve":{"id":"CVE-2025-23039","sourceIdentifier":"security-advisories@github.com","published":"2025-01-17T21:15:11.560","lastModified":"2026-04-15T00:35:42.020","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to the theft of sensitive information. This issue has been addressed in version 0.45.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability."},{"lang":"es","value":"Caido es un kit de herramientas de auditoría de seguridad web. Se identificó una vulnerabilidad de Cross-Site Scripting (XSS) en Caido v0.45.0 debido a una desinfección incorrecta en la información sobre herramientas de decodificación de URL de los editores de solicitudes y respuestas HTTP. Este problema podría permitir que un atacante ejecute Scripts arbitrario, lo que podría llevar al robo de información confidencial. Este problema se ha solucionado en la versión 0.45.1 y se recomienda a todos los usuarios que actualicen. No se conocen workarounds para esta vulnerabilidad."}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","baseScore":5.2,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.5,"impactScore":3.6}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-79"}]}],"references":[{"url":"https://github.com/caido/caido/security/advisories/GHSA-3mfw-fhfp-mgrv","source":"security-advisories@github.com"}]}}]}