Advisories · Technology
CISA Thorium.
Every CVE that names CISA Thorium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
CISA Thorium account verification email error handling
- CISA Thorium
- CWE-248
- CVSS 5.3 Medium
CISA Thorium download stream divide by zero
- CISA Thorium
- Denial of service
- CVSS 2.3 Low
CISA Thorium does not validate TLS connections to Elasticsearch
- CISA Thorium
- Weak cryptography or TLS
- CVSS 2.3 Low
CISA Thorium does not properly invalidate previously used tokens
- CISA Thorium
- Authentication bypass
- CVSS 6.9 Medium
CISA Thorium does not rate limit account verification email messages
- CISA Thorium
- Denial of service
- CVSS 5.3 Medium
CISA Thorium LDAP injection
- CISA Thorium
- Other injection
- CVSS 5.3 Medium
CISA Thorium insecure downloaded file path validation
- CISA Thorium
- Path traversal