CVE-2025-35431
CISA Thorium LDAP injection
概要
CISA Thorium LDAP injection
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org