CVE-2021-29431highCWE-20CWE-918

CVE-2021-29431: falha de alta gravidade em matrix-org sydent

SSRF in Sydent due to missing validation of hostnames

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar sydent+ Monitorar matrix-sydent

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7epss 1.2%
Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
matrix-org · sydent
CVEs relacionadas — matrix-org sydent

No mesmo produto, das mais perigosas para as menos.

CVE-2021-29430HIGHDenial of service attack via memory exhaustionEPSS 1.8%CVE-2021-29432MEDIUMMalicious users could control the content of invitation emailsEPSS 0.9%CVE-2021-29433MEDIUMDenial of service (via resource exhaustion) due to improper input validationEPSS 0.9%CVE-2023-38686CRITICALSydent does not verify email server certificatesEPSS 0.3%