Caido Reflected Cross-Site Scripting Vulnerability in Toast UI Component

A reflected cross-site scripting vulnerability has been identified in Caido, a web security auditing toolkit, specifically within the toast UI component. This issue affects versions of Caido prior to 0.49.0. The vulnerability arises because toast messages can reflect unsanitized user input in certain tools, such as Match&Replace and Scope. An attacker could exploit this by crafting input that executes arbitrary scripts.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute scripts in the context of the user's browser.

Remediation

Users can upgrade to Caido version 0.49.0 or later to address this vulnerability. This version is available for download on the Caido GitHub Releases page.