Security Advisory

CVE-2025-35436

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-17 16:53:47
Last updated 2025-09-30 16:36:16
Assigner cisa-cg
CVSS score 5.3
State PUBLISHED

Description

CISA Thorium uses '.unwrap()' to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially crafted email address or response. Fixed in commit 6a65a27.