CVE-2025-66025

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-66025", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-11-21T01:08:02.614Z", "datePublished": "2025-11-26T01:59:06.790Z", "dateUpdated": "2025-11-26T15:15:02.930Z"}, "containers": {"cna": {"title": "Caido Improperly Handles External Links in Markdown", "problemTypes": [{"descriptions": [{"cweId": "CWE-74", "lang": "en", "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2"}], "affected": [{"vendor": "caido", "product": "caido", "versions": [{"version": "< 0.53.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-11-26T01:59:06.790Z"}, "descriptions": [{"lang": "en", "value": "Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido\u2019s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or other plugins, clicking these injected links could redirect the Caido application to an attacker-controlled domain, enabling phishing style attacks. This issue has been patched in version 0.53.0."}], "source": {"advisory": "GHSA-cf52-h5mw-gmc2", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-26T15:14:55.060375Z", "id": "CVE-2025-66025", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-26T15:15:02.930Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-66025", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-26T15:14:55.060375Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-26T15:14:59.346Z"}}], "cna": {"title": "Caido Improperly Handles External Links in Markdown", "source": {"advisory": "GHSA-cf52-h5mw-gmc2", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "caido", "product": "caido", "versions": [{"status": "affected", "version": "< 0.53.0"}]}], "references": [{"url": "https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2", "name": "https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido\u2019s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or other plugins, clicking these injected links could redirect the Caido application to an attacker-controlled domain, enabling phishing style attacks. This issue has been patched in version 0.53.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-11-26T01:59:06.790Z"}}}, "cveMetadata": {"cveId": "CVE-2025-66025", "state": "PUBLISHED", "dateUpdated": "2025-11-26T15:15:02.930Z", "dateReserved": "2025-11-21T01:08:02.614Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-11-26T01:59:06.790Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "caido", "vendor": "caido", "versions": [{"status": "affected", "version": "< 0.53.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido\u2019s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or other plugins, clicking these injected links could redirect the Caido application to an attacker-controlled domain, enabling phishing style attacks. This issue has been patched in version 0.53.0."}, {"lang": "es", "value": "Caido es un kit de herramientas de auditor\u00eda de seguridad web. Versiones anteriores a la 0.53.0, el renderizador de Markdown utilizado en la p\u00e1gina de Hallazgos de Caido manejaba incorrectamente el Markdown proporcionado por el usuario, permitiendo que enlaces controlados por el atacante se renderizaran sin confirmaci\u00f3n. Cuando un usuario abr\u00eda un hallazgo generado a trav\u00e9s del esc\u00e1ner, u otros plugins, hacer clic en estos enlaces inyectados podr\u00eda redirigir la aplicaci\u00f3n Caido a un dominio controlado por el atacante, habilitando ataques de estilo phishing. Este problema ha sido parcheado en la versi\u00f3n 0.53.0."}], "id": "CVE-2025-66025", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66025", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-26T15:14:55.060375Z", "version": "2.0.3"}}]}, "published": "2025-11-26T03:15:58.277", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"created": "2025-11-28T08:51:40.481215+00:00", "updated": "2025-11-28T08:51:40.481240+00:00", "vendors": ["caido", "caido$PRODUCT$caido"]}