CVE-2021-33840: Luca-App Luca

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records related to COVID-19) because Phone Number data lacks a digital signature.

Affected products

• Luca-App Luca: up to and including 1.1.14

Published 2021-06-04. Last modified 2026-06-17.