CVE-2025-35432
CISA Thorium does not rate limit account verification email messages
概要
CISA Thorium does not rate limit account verification email messages
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org