CVE-2021-29433
CVE-2021-29433 · Denial of service (via resource exhaustion) due to improper input validation
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist.
CVSS 4.3 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
sydent
- Versions
- <= 2.2.0: Affected
No fix published
matrix-sydent PyPI
- Versions
- 2.0.0
- 2.0.1
- 2.1.0
- 2.2.0
- Affected ranges
- ECOSYSTEM: < 2.3.0
Update to 2.3.0