VULNERABILITY INTELLIGENCE

CVE-2025-35431

CVSS score5.4 MEDIUM

EPSS probability0.31%

CISA KEVNot currently listed

Published2025-09-17

Last modified2026-06-17

Description

CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.