Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-35436

CISA Thorium account verification email error handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisa-cg

Description

CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CISA Thorium

Default version status: unknown

  • 1.0.0 to < 6a65a27affected
  • 6a65a27unaffected

References