Skip to content
OpenAdvisories

Product · Matrix

sydent

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2021-29432

    Malicious users could control the content of invitation emails

    Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

    Matrix sydent matrix-sydent PyPI
  • Medium 4.3
    CVE-2021-29433

    Denial of service (via resource exhaustion) due to improper input validation

    Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhau…

    Matrix sydent matrix-sydent PyPI