← All advisories

Medium severity5.3NVD Advisory· Published Jun 7, 2021· Updated Jun 17, 2026

CVE-2021-33896

CVE-2021-33896

Description

Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Dino/Dinodescription
Dino/Dinollm-fuzzy2 versions
<0.1.2 >=0.2.0 <0.2.1+ 1 more
- (no CPE)range: <0.1.2 >=0.2.0 <0.2.1
- cpe:2.3:a:dino:dino:*:*:*:*:*:*:*:*range: <0.1.2
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2021/06/07/2nvdMailing ListPatchThird Party Advisory
dino.im/security/cve-2021-33896/nvdPatchVendor Advisory
dino.im/blog/nvdVendor Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODN4ZSTBYIW25DO3FNRK6FQRGSYGT57I/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P55V3TVSVXREOJAJRXNUSBEUZFOU54V3/nvd

News mentions

0

No linked articles in our index yet.