PT-2021-18207 · Sydent · Sydent

Richvdh · Published 2021-04-15 · Updated 2021-04-22 · CVE-2021-29431

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Sydent versions prior to the versions including fixes 9e57334, 8936925, 3d531ed, 0f00412

Description: The issue allows Sydent to be induced to send HTTP GET requests to internal systems due to a lack of parameter validation or IP address blacklisting. Although it is not possible to exfiltrate data or control request headers, the attack might be used to perform an internal port enumeration.

Recommendations: For versions prior to the fixed versions, update to a version that includes the fixes 9e57334, 8936925, 3d531ed, 0f00412 to resolve the issue. As a temporary workaround, consider configuring a firewall to prevent Sydent from reaching internal HTTP resources.

Fix

SSRF

RCE

Weakness Enumeration

CWE-918

CWE-20

Related Identifiers

CVE-2021-29431

GHSA-9JHM-8M8C-C3F4

PYSEC-2021-22

Affected Products

Sydent

References · 13

• https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a · Patch
• https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f · Patch
• https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a · Patch
• https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3 · Patch
• https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4 · Patch
• https://osv.dev/vulnerability/PYSEC-2021-22 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-29431 · Security Note
• https://osv.dev/vulnerability/GHSA-9jhm-8m8c-c3f4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29431 · Vendor Advisory
• https://github.com/matrix-org/sydent/releases/tag/v2.3.0 · Note
• https://github.com/matrix-org/sydent · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2021-22.yaml · Note
• https://pypi.org/project/matrix-sydent · Note