Server Side Request Forgery (SSRF)

labelstudio is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to the lack of proper validation or restrictions on the custom S3 endpoint URL, allowing an attacker to send HTTP requests to arbitrary internal services by specifying them as the S3 endpoint...

Information Disclosure

labelstudio is vulnerable to Information Disclosure. The vulnerability exists due to a misconfiguration in the Nginx server which allows an attacker to use a single path traversal payload and read all the files in /labelstudio/core...

Server-Side Request Forgery (SSRF)

labelstudio is vulnerable to server-side request forgery. The vulnerability exists in the loadtasks function in uploader.py because the library doesn't properly validate URLs in data import functionality, which allows an authenticated attacker to cause an ssrf bypass via a maliciously crafted URL...