NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2021-41733

CVSS 3.1: 6.1 medium
EPSS: <1%p53
Published: Nov 8, 2021 · Nov 8, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-41733 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.

Vendors: oppia

Products: oppia

Weakness: CWE-601

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

3 stories

Threat Source newsletter (Oct. 28, 2021)

Cisco TalosOct 28, 18:00 UTC · Oct 28, 2021RansomwareExploitedCVE-2021-41733 CVE-2021-420132 · 1 read

60

Threat Source newsletter (Oct. 14, 2021)

Cisco TalosOct 14, 18:00 UTC · Oct 14, 2021RansomwareExploitedCVE-2021-40461 CVE-2021-38672 CVE-2021-41733+13 · 1 read

60

Threat Advisory: Apache HTTP Server zero-day vulnerability opens door for attackers

Cisco TalosOct 7, 19:36 UTC · Oct 7, 2021Exploit / PoCExploitedCVE-2021-41733 CVE-2021-420132

60