Improper Input Validation Affecting matrix-sydent package, versions [,2.3.0)
Snyk CVSS
Attack Complexity
Low
Threat Intelligence
EPSS
0.07% (31st
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-MATRIXSYDENT-1247369
- published 16 Apr 2021
- disclosed 16 Apr 2021
- credit Unknown
Introduced: 16 Apr 2021
CVE-2021-29433 Open this link in a new tabHow to fix?
Upgrade matrix-sydent
to version 2.3.0 or higher.
Overview
matrix-sydent is a Reference Matrix Identity Verification and Lookup Server
Affected versions of this package are vulnerable to Improper Input Validation. Missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion.