Skip to content
OpenAdvisories

Vendor

caido

5 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 4.3

    Caido Improperly Handles External Links in Markdown

    Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a find…

  • Medium 6.3

    Caido Toast Vulnerable to Reflected Cross-site Scripting

    Caido is a web security auditing toolkit. A reflected cross-site scripting (XSS) vulnerability was discovered in Caido’s toast UI component in versions prior to 0.49.0. Toast messages may reflect unsanitized user input in certain tools such as Match&Replace a…

  • Medium 5.2

    Cross Site Scripting on URL decode Tooltip in Caido

    Caido is a web security auditing toolkit. A Cross-Site Scripting (XSS) vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute a…