EUVD-2021-15796

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Dovecot before 2.3.15 allows path traversal for local JWT validation through OAuth2 authentication

Reporter	Title	Published	Views	Family All 100
ALT Linux	Security fix for the ALT Linux 9 package dovecot version 2.3.16-alt1	19 Aug 202100:00	–	altlinux
AlpineLinux	CVE-2021-29157	28 Jun 202111:58	–	alpinelinux
ArchLinux	[ASA-202106-56] dovecot: information disclosure	22 Jun 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the Dovecot mail server, related to errors in the encapsulation fields kid and azp in JWT tokens, allows a malicious actor to gain unauthorized access to protected information.	25 Jun 202100:00	–	bdu_fstec
CBLMariner	CVE-2021-29157 affecting package dovecot for versions less than 2.3.20-1	28 Sep 202311:57	–	cbl_mariner
Circl	CVE-2021-29157	28 Jun 202116:27	–	circl
CNNVD	Dovecot 路径遍历漏洞	21 Jun 202100:00	–	cnnvd
CVE	CVE-2021-29157	28 Jun 202111:58	–	cve
Cvelist	CVE-2021-29157	28 Jun 202111:58	–	cvelist
FreeBSD	dovecot -- multiple vulnerabilities	22 Mar 202100:00	–	freebsd

[
  {
    "enisaIdVendor": [
      {
        "id": "5cd79cf5-da32-33a0-b9df-508b0f23e6f6",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d92f5795-b223-316d-adfa-e73fc52b86bf",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2021-29157.html
ubuntu	www.ubuntu.com/security/CVE-2021-29157
advisories	www.advisories.mageia.org/CVE-2021-29157.html
security	www.security.archlinux.org/CVE-2021-29157
dovecot	www.dovecot.org/security
openwall	www.openwall.com/lists/oss-security/2021/06/28/1
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JB2VTJ3G2ILYWH5Y2FTY2PUHT2MD6VMI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TK424DWFO2TKJYXZ2H3XL633TYJL4GQN/
security	www.security.gentoo.org/glsa/202107-41
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.5 - 7.5

CVSS 22.1

EPSS0.00762