Skip to content
OpenAdvisories

Product · Matrix

sydent

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2021-29431

    SSRF in Sydent due to missing validation of hostnames

    Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might b…

    Matrix sydent matrix-sydent PyPI
  • High 7.5
    CVE-2021-29430

    Denial of service attack via memory exhaustion

    Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an HTTP request with a very large body, leading to memory exhaustion and denial of service. Sydent also does no…

    Matrix sydent matrix-sydent PyPI