CVE-2021-29432

Source
https://nvd.nist.gov/vuln/detail/CVE-2021-29432
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29432.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-29432
Aliases
Related
Published
2021-04-15T21:15:17Z
Modified
2025-01-15T01:48:40.790646Z
Severity
  • 5.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

References

Affected packages

Git / github.com/matrix-org/sydent

Affected ranges

Type
GIT
Repo
https://github.com/matrix-org/sydent
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

Other

fosdem_2021-01-15

v1.*

v1.0.0
v1.0.1
v1.0.2
v1.0.3

v2.*

v2.0.0
v2.0.1
v2.1.0
v2.2.0