TI-2023-20035 CVE-2023-38686 · GHSA-p6hw-wm59-3g5g
Sydent does not verify email server certificates
Priority HIGH 75
Sydent is an identity server for the Matrix communications protocol.
matrix-org
Records116All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9
Exploited now
matrix-org records in CISA KEVNo matrix-org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Sydent · all components
TI-2021-10144 CVE-2021-29431 · GHSA-9jhm-8m8c-c3f4
SSRF in Sydent due to missing validation of hostnames
Priority LOW 36
Sydent is a reference Matrix identity server.
TI-2021-10143 CVE-2021-29430 · GHSA-wmg4-8cp2-hpg9
Denial of service attack via memory exhaustion
Priority LOW 36
Sydent is a reference Matrix identity server.
TI-2019-08878 CVE-2019-11842 · GHSA-gwf7-vfjf-wf6x
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1.
Priority LOW 36
An issue was discovered in Matrix Sydent before 1.0.3 and Synapse before 0.99.3.1.
TI-2019-08469 CVE-2019-11340 · GHSA-q9h8-gpw5-c95c
util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions…
Priority LOW 30
util/emailutils.py in Matrix Sydent before 1.0.2 mishandles registration restrictions that are based on e-mail domain, if the allowed_local_3pids option is enabled.
TI-2021-10145 CVE-2021-29432 · GHSA-mh74-4m5g-fcjx
Malicious users could control the content of invitation emails
Priority LOW 27
Sydent is a reference matrix identity server.
TI-2021-10146 CVE-2021-29433 · GHSA-pw4v-gr34-2553
Denial of service (via resource exhaustion) due to improper input validation
Priority LOW 22
Sydent is a reference Matrix identity server.