CVE-2021-4315

A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.1 is able to address this issue. The name of the patch is 47787e15cecd66f2aa87687bf852ae0194a4335f. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-219676.

• CWE-1336
• CWE-94

• https://github.com/NYUCCL/psiTurk/commit/47787e15cecd66f2aa87687bf852ae0194a4335fPatch
• https://github.com/NYUCCL/psiTurk/pull/517Issue Tracking
• https://github.com/NYUCCL/psiTurk/releases/tag/v3.2.1Release Notes
• https://vuldb.com/?ctiid.219676Permissions Required
• https://vuldb.com/?id.219676Permissions Required
• https://github.com/NYUCCL/psiTurk/commit/47787e15cecd66f2aa87687bf852ae0194a4335fPatch
• https://github.com/NYUCCL/psiTurk/pull/517Issue Tracking
• https://github.com/NYUCCL/psiTurk/releases/tag/v3.2.1Release Notes
• https://vuldb.com/?ctiid.219676Permissions Required
• https://vuldb.com/?id.219676Permissions Required

Published

Jan 28, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4314It is possible to manipulate the JWT token without the knowl…5.3
• CVE-2021-43140SQL Injection vulnerability exists in Sourcecodester. Simple…9.8
• CVE-2021-43141Cross Site Scripting (XSS) vulnerability exists in Sourcecod…6.1
• CVE-2021-43142An XML External Entity (XXE) vulnerability exists in wuta jo…9.8
• CVE-2021-43145With certain LDAP configurations, Zammad 5.0.1 was found to …8.1
• CVE-2021-43149Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-43154Cross Site Scripting (XSS) vulnerability exists in CMS Made …6.1
• CVE-2021-43155Projectsworlds Online Book Store PHP v1.0 is vulnerable to S…9.8
• CVE-2021-43156In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerabil…6.5
• CVE-2021-43157Projectsworlds Online Shopping System PHP 1.0 is vulnerable …9.8
• CVE-2021-43158In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vuln…4.3
• CVE-2021-43159A Remote Code Execution (RCE) vulnerability exists in Ruijie…8.8