CVE - CVE-2021-29431

CVE-ID
CVE-2021-29431	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4 URL:https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4 MISC:https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a URL:https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a MISC:https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3 URL:https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3 MISC:https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a URL:https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a MISC:https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f URL:https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f MISC:https://github.com/matrix-org/sydent/releases/tag/v2.3.0 URL:https://github.com/matrix-org/sydent/releases/tag/v2.3.0 MISC:https://pypi.org/project/matrix-sydent/ URL:https://pypi.org/project/matrix-sydent/
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20210330	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20210330)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)