Remote Code Execution (RCE)

psiturk is vulnerable to Remote Code Execution. The vulnerability exists in experiment.py due to the improper sanitization of special elements used as the template engine, which allows a remote attacker to inject and execute arbitrary Python commands...

CVE-2021-4315 NYUCCL psiTurk experiment.py special elements used in a template engine

A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used in a template engine. The exploit has...