EUVD-2023-0132

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Sydent email vulnerability before 2.5.6 allows man-in-the-middle attacks on unverified SMTP servers.

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2023-38686	4 Aug 202320:41	–	circl
CNNVD	Matrix Sydent Trust Management Issues Vulnerabilities	4 Aug 202300:00	–	cnnvd
CVE	CVE-2023-38686	4 Aug 202315:57	–	cve
Cvelist	CVE-2023-38686 Sydent does not verify email server certificates	4 Aug 202315:57	–	cvelist
Debian CVE	CVE-2023-38686	4 Aug 202315:57	–	debiancve
Github Security Blog	Sydent does not verify email server certificates	31 Jul 202322:03	–	github
NVD	CVE-2023-38686	4 Aug 202316:15	–	nvd
OSV	CVE-2023-38686 Sydent does not verify email server certificates	4 Aug 202315:57	–	osv
OSV	GHSA-P6HW-WM59-3G5G Sydent does not verify email server certificates	31 Jul 202322:03	–	osv
OSV	PYSEC-2023-139	4 Aug 202316:15	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "536f8d71-3fb7-3096-ac5c-8a8ac4405e32",
        "vendor": {
          "name": "matrix-org"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8990d6d9-2ecd-3a5c-a55d-c3c732de59a6",
        "product": {
          "name": "sydent"
        },
        "product_version": "< 2.5.6"
      }
    ]
  }
]

Source	Link
github	www.github.com/python/cpython/issues/91826
github	www.github.com/matrix-org/sydent/commit/1cd748307c6b168b66154e6c4db715d4b9551261
github	www.github.com/matrix-org/sydent/releases/tag/v2.5.6
github	www.github.com/matrix-org/sydent/security/advisories/GHSA-p6hw-wm59-3g5g
peps	www.peps.python.org/pep-0476/
docs	www.docs.python.org/3/library/ssl.html
github	www.github.com/matrix-org/sydent/pull/574
github	www.github.com/matrix-org/sydent/pull/574
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-38686
github	www.github.com/pypa/advisory-database/tree/main/vulns/matrix-sydent/PYSEC-2023-139.yaml

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 3.15.3 - 9.3

EPSS0.00064

SSVC