https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:22:16 +0000 https://cve.radiocsirt.org/vuln/cve-2023-47116 <p><strong>Affected:</strong> HumanSignal label-studio</p> <p>Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio&#39;s SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.</p> <p><strong>Affected:</strong> HumanSignal label-studio</p> <p>Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio&#39;s SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.</p> https://cve.radiocsirt.org/vuln/cve-2023-47116 https://cve.radiocsirt.org/vuln/ghsa-p59w-9gqw-wj8r <p><strong>Affected:</strong> PyPI: label-studio</p> <p># Introduction</p> <p>This write-up describes a vulnerability found in [Label Studio](https://github.com/HumanSignal/label-studio), a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to [`1.11.0`](https://github.com/HumanSignal/label-studio/releases/tag/1.11.0) and was tested on version `1.8.2`.</p> <p># Overview</p> <p>Label Studio&#39;s SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a [DNS rebinding attack](https://en.wikipedia.org/wiki/DNS_rebinding).</p> <p># Description</p> <p>The following `tasks_from_url` method in [`label_studio/data_import/uploader.py`](https://github.com/HumanSignal/label-studio/blob/1.8.2/label_studio/data_import/uploader.py#L127-L155) performs the SSRF validation (`validate_upload_url`) before sending the request.</p> <p>```python def tasks_from_url(file_upload_ids, project, user, url, could_be_tasks_list): &#34;&#34;&#34;Download file using URL and read tasks from it&#34;&#34;&#34; # process URL with tasks try: filename = url.rsplit(&#39;/&#39;, 1)[-1]</p> <p>validate_upload_url(url, block_local_urls=settings.SSRF_PROTECTION_ENABLED) # Reason for #nosec: url has been validated as SSRF safe by the # valid…</p> <p><strong>Affected:</strong> PyPI: label-studio</p> <p># Introduction</p> <p>This write-up describes a vulnerability found in [Label Studio](https://github.com/HumanSignal/label-studio), a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to [`1.11.0`](https://github.com/HumanSignal/label-studio/releases/tag/1.11.0) and was tested on version `1.8.2`.</p> <p># Overview</p> <p>Label Studio&#39;s SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a [DNS rebinding attack](https://en.wikipedia.org/wiki/DNS_rebinding).</p> <p># Description</p> <p>The following `tasks_from_url` method in [`label_studio/data_import/uploader.py`](https://github.com/HumanSignal/label-studio/blob/1.8.2/label_studio/data_import/uploader.py#L127-L155) performs the SSRF validation (`validate_upload_url`) before sending the request.</p> <p>```python def tasks_from_url(file_upload_ids, project, user, url, could_be_tasks_list): &#34;&#34;&#34;Download file using URL and read tasks from it&#34;&#34;&#34; # process URL with tasks try: filename = url.rsplit(&#39;/&#39;, 1)[-1]</p> <p>validate_upload_url(url, block_local_urls=settings.SSRF_PROTECTION_ENABLED) # Reason for #nosec: url has been validated as SSRF safe by the # valid…</p> https://cve.radiocsirt.org/vuln/ghsa-p59w-9gqw-wj8r