Explore

CVEsPayloads Campaigns AEI Index Ports User-agents

Integrations

Overview MCP Feeds API / Enrich

Sign in

CVE report

CVE-2021-41277highKEV

Metabase - Local File Inclusion

Events 7d

6

Distinct IPs

1

Severity

high

CISA KEV

Actively exploited

Downloads & integrations

CSV (source IPs)JSON Save as feed

Top sources probing for CVE-2021-41277

80.87.206.2376 events
Russia· OVH SAS

Top networks the attempts come from

AS16276 OVH SAS1 IPs · 6 ev

Fingerprints of the clients exploiting this

The HTTP (JA4H) and TLS (JA4) fingerprints seen on these attempts. Click one to see the whole population that carries it.

ja4h: ge11nn0400_9c3956fad5da ja4: t13i191000_9dc949149365_e5728521abd4

Sample request paths observed

/api/geojson?url=file:///etc/hosts

URL patterns we match

An event counts toward CVE-2021-41277 if its URL path contains any of these substrings (case-insensitive).

· /api/geojson