CVE-2021-41733

—

CVSS 3.1

6.1 medium

EPSS

<1%p53

Published

Nov 8, 2021 (Nov 8, 2021)

Modified

Jun 17, 2026

Description

Oppia 3.1.4 does not verify that certain URLs are valid before navigating to them.

Vendors: oppia
Products: oppia
Weakness: CWE-601
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news3 stories

Threat Source newsletter (Oct. 28, 2021)

Cisco TalosOct 28, 18:00 UTC · Oct 28, 2021Ransomware in the wildCVE-2021-41733 CVE-2021-42013

60

Threat Source newsletter (Oct. 14, 2021)

Cisco TalosOct 14, 18:00 UTC · Oct 14, 2021Ransomware in the wildCVE-2021-40461 CVE-2021-38672 CVE-2021-41733+1 CVEs

60

Threat Advisory: Apache HTTP Server zero-day vulnerability opens door for attackers

Cisco TalosOct 7, 19:36 UTC · Oct 7, 2021Exploit / PoC in the wildCVE-2021-41733 CVE-2021-42013

60