CVE-2025-47783: Improper Neutralization of Input During Web Page Generation

Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to 1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to data theft, session hijacking, unauthorized actions on behalf of the user, and other attack...

Server Side Request Forgery (SSRF)

labelstudio is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the lack of proper validation or restrictions on the custom S3 endpoint URL, allowing an attacker to send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint...

Information Disclosure

labelstudio is vulnerable to Information Disclosure. The vulnerability exists due to a misconfiguration in the Nginx server which allows an attacker to use a single path traversal payload and read all the files in /labelstudio/core...

Server-Side Request Forgery (SSRF)

labelstudio is vulnerable to server-side request forgery. The vulnerability exists in the loadtasks function in uploader.py because the library doesn't properly validate URLs in data import functionality, which allows an authenticated attacker to cause an ssrf bypass via a maliciously crafted URL...