CVE-2021-4315 is a critical vulnerability affecting NYUCCL psiTurk versions up to 3.2.0, specifically within the psiturk/experiment.py file. It stems from improper neutralization of special elements in a template engine when the 'mode' argument is manipulated. This flaw allows for high impact to confidentiality, integrity, and availability. With a CVSS score of 8.8 (High), this vulnerability can be exploited remotely with low attack complexity and requires only low privileges, making it a significant risk. The public disclosure of the exploit increases its potential for misuse. While the exploit has been publicly disclosed, there is currently no evidence of active exploitation in the wild, nor are there known Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage for this CVE are minimal, which is typical for most vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.2.1CPE matchmatch criteria | cpe:2.3:a:psiturk:psiturk:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.