CVE-2025-35433
CISA Thorium does not properly invalidate previously used tokens
Résumé
CISA Thorium does not properly invalidate previously used tokens
Description d'origine
La description telle que publiée par la source (souvent en anglais).
CISA Thorium does not properly invalidate previously used tokens when resetting passwords. An attacker that possesses a previously used token could still log in after a password reset. Fixed in 1.1.1.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org