PYSEC-2021-23

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/matrix-sydent/PYSEC-2021-23.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2021-23
Aliases
Published
2021-04-15T21:15:00Z
Modified
2023-11-08T04:05:33.772633Z
Summary
[none]
Details

Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d.

References

Affected packages

PyPI / matrix-sydent

Package

Affected ranges

Type
GIT
Repo
https://github.com/matrix-org/sydent
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.3.0

Affected versions

2.*

2.0.0
2.0.1
2.1.0
2.2.0