PT-2025-38230 · Cisa · Thorium

Published 2025-09-17 · Updated 2025-09-17 · CVE-2025-35431

NVD

CVSS v3.1

5.4

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.

Fix

Weakness Enumeration

CWE-90

Related Identifiers

CVE-2025-35431

Affected Products

Thorium

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-35431 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-35431 · Security Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-259-01.json · Note
• https://github.com/cisagov/thorium/commit/7c94a0b9bc2dc55e0c307360452f348bac06820c#diff-45e1e58dfb6faacf9efe778c31ead287d8e13ae07c5dad084c792bc4a0605a68R1007-R1008 · Note
• https://github.com/cisagov/thorium/releases/tag/1.1.1 · Note