EUVD-2021-20569

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Dino versions before 0.1.2 and 0.2.1 allow Directory Traversal for new file creation via URI-encoded paths

Reporter	Title	Published	Views	Family All 27
ATTACKERKB	CVE-2021-33896	7 Jun 202119:15	–	attackerkb
AlpineLinux	CVE-2021-33896	7 Jun 202118:12	–	alpinelinux
ArchLinux	[ASA-202107-35] dino: directory traversal	20 Jul 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the XMPP Dino chat client, related to deficiencies in path name limitation, allows attackers to compromise data integrity.	5 Oct 202100:00	–	bdu_fstec
CNNVD	Dino 路径遍历漏洞	7 Jun 202100:00	–	cnnvd
CNVD	Dino Path Traversal Vulnerability	9 Jun 202100:00	–	cnvd
CVE	CVE-2021-33896	7 Jun 202118:12	–	cve
Cvelist	CVE-2021-33896	7 Jun 202118:12	–	cvelist
Debian CVE	CVE-2021-33896	7 Jun 202118:12	–	debiancve
FreeBSD	dino -- Path traversal in Dino file transfers	7 Jun 202100:00	–	freebsd

[
  {
    "enisaIdVendor": [
      {
        "id": "4c0a055a-800b-38a8-877c-ec2124ccf742",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ad5a5787-d363-3185-baf7-637904db63e9",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
advisories	www.advisories.mageia.org/CVE-2021-33896.html
security	www.security.archlinux.org/CVE-2021-33896
dino	www.dino.im/blog/
dino	www.dino.im/security/cve-2021-33896/
openwall	www.openwall.com/lists/oss-security/2021/06/07/2
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODN4ZSTBYIW25DO3FNRK6FQRGSYGT57I/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P55V3TVSVXREOJAJRXNUSBEUZFOU54V3/
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.15.3

CVSS 25

EPSS0.01766