2 matches found
CVE-2025-35432
CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...
7.5CVSS7AI score0.00562EPSS
SaveExploits0References1
CVE-2025-35432
CISA Thorium does not rate limit requests to send account verification email messages. A remote unauthenticated attacker can send unlimited messages to a user who is pending verification. Fixed in 1.1.1 by adding a rate limit set by default to 10 minutes...
7.5CVSS0.00562EPSS
SaveExploits0References6
20