CVE-2025-35431 | CISA Thorium up to 1.1.0 Group Membership ldap injection

September 18, 2025 Yanac

A vulnerability, which was classified as critical, has been found in CISA Thorium up to 1.1.0. This vulnerability affects unknown code of the component Group Membership Handler. This manipulation causes ldap injection.

This vulnerability is registered as CVE-2025-35431. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More