Skip to content
OpenAdvisories

Package · PyPI

matrix-sydent

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-29432

    Malicious users could control the content of invitation emails

    Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

    Matrix sydent matrix-sydent PyPI
  • Medium 4.3
    CVE-2021-29433

    Denial of service (via resource exhaustion) due to improper input validation

    Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhau…

    Matrix sydent matrix-sydent PyPI
  • Medium 5.9
    CVE-2019-11340

    Matrix Sydent mishandles emails

    util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled. This occurs because of potentially unwanted behavior in Python, in which an email.utils.parsea…

    matrix-sydent PyPI