CVE-2021-29433

Name of the Vulnerable Software and Affected Versions: Sydent versions 2.2.0 and prior

Description: The issue is related to missing input validation of some parameters on the endpoints used to confirm third-party identifiers, which could cause excessive use of disk space and memory leading to resource exhaustion.

Recommendations: For Sydent versions 2.2.0 and prior, update to version 2.3.0 to resolve the issue. As a temporary workaround, consider restricting access to the endpoints used to confirm third-party identifiers until a patch is applied. Avoid using parameters that are not properly validated on these endpoints until the issue is resolved.