CVE-2025-35431: CISA Thorium LDAP injection
Published Sep 17, 2025
·Updated
CISA Thorium does not escape user controlled strings used in LDAP queries. An authenticated remote attacker can modify LDAP authorization data such as group memberships. Fixed in 1.1.1.
Affected Software
2 affected components
CISA Thorium<1.1.1
CISA Thorium>=1.0.0<1.1.1
Remediation
Event History
Sep 17, 2025
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-35431?
CVE-2025-35431 has a critical severity rating due to the potential for unauthorized modification of LDAP authorization data.
2
How do I fix CVE-2025-35431?
To fix CVE-2025-35431, upgrade CISA Thorium to version 1.1.1 or later.
3
Who is affected by CVE-2025-35431?
Users of CISA Thorium versions prior to 1.1.1 are affected by CVE-2025-35431.
4
What type of vulnerability is CVE-2025-35431?
CVE-2025-35431 is a security vulnerability that relates to improper string escaping in LDAP queries.
5
Can CVE-2025-35431 be exploited remotely?
Yes, an authenticated remote attacker can exploit CVE-2025-35431 to modify LDAP authorization data.