Skip to content
OpenAdvisories

Package · Ubuntu

matrix-sydent

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2023-38686

    Sydent does not verify email server certificates

    Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-midd…

    Matrix sydent matrix-sydent matrix-sydent Ubuntu PyPI