Caido Cross-Site Scripting Vulnerability

A Cross-Site Scripting (XSS) vulnerability exists in Caido version 0.45.0. The issue arises from inadequate sanitization in the URL decoding tooltip within the HTTP request and response editors. This vulnerability allows attackers to execute arbitrary scripts, potentially leading to the theft of sensitive information. The vulnerability has been patched in version 0.45.1, and users are advised to upgrade.

Impact

Exploitation of this vulnerability allows for Cross-Site Scripting (XSS) attacks, where an attacker can inject and execute malicious scripts in the context of the user's browser.

Remediation

Users can upgrade to Caido version 0.45.1 to address this vulnerability.