CVE-2025-35433
CISA Thorium does not properly invalidate previously used tokens
概要
CISA Thorium does not properly invalidate previously used tokens
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker that possesses a previously used token could still log in after a password reset. Fixed in 1.1.1.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org