CVE-2025-35436
CISA Thorium account verification email error handling
Summary
CISA Thorium account verification email error handling
Original description
The description as published by the source.
CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27.
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web raw.githubusercontent.com
- web cve.org