Malicious users could abuse Sydent to control the content of invitation emails

Mô tả

Tham khảo

• matrix-org/sydent security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2021-29432 · ADVISORY
• matrix-org/sydent commit 4469d1d · WEB
• matrix-org/sydent release v2.3.0 · WEB
• pypa/advisory-database · WEB
• pypi.org/project/matrix-sydent · WEB
• pypi.org/project/matrix-sydent · Product

Lỗ hổng khác của matrix-sydent

• CVE-2023-38686TRUNG BÌNH 5.3Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent …
• CVE-2021-29431TRUNG BÌNH 6.5Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter …
• CVE-2021-29430CAO 7.5Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user cou…
• CVE-2021-29433TRUNG BÌNH 4.3Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoin…
• CVE-2019-11842CAO 7.5An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1. Random number generation is mishandled, which makes it ea…