cve/2021/CVE-2021-44749.md

### [CVE-2021-44749](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44749)
![](https://img.shields.io/static/v1?label=Product&message=F-Secure%20SAFE%20Browser%20for%20Android%20Version%2018.5&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2018.5x%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Universal%20Cross-Site%20Scripting%20Vulnerability%20in%20F-Secure%20SAFE%20Browser%20Protection%20for%20Android&color=brighgreen)

### Description

A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A successful exploitation may lead to arbitrary code execution.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/KirtiRamchandani/KirtiRamchandani