CVE-2025-35433 | CISA Thorium up to 1.1.0 Password Reset session expiration

September 18, 2025 Yanac

A vulnerability, which was classified as problematic, was found in CISA Thorium up to 1.1.0. The impacted element is an unknown function of the component Password Reset Handler. Executing manipulation can lead to session expiration.

This vulnerability is registered as CVE-2025-35433. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More