MEDIUM🇵🇱 Wersja polska

CVE-2021-29432

CVSS 5.3v3.1pub. 2021-04-15upd. 2024-11-21

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Matrix Sydent

    APP
    Matrix
    < 2.3.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-38686CRITICAL9.3ten sam produkt

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to ...

CVE-2021-29430HIGH7.5ten sam produkt

Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP...

CVE-2021-29431HIGH7.7ten sam produkt

Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal syst...

CVE-2019-11842HIGH7.5ten sam produkt

An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is...

CVE-2021-29433MEDIUM4.3ten sam produkt

Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of ...