high6.5Public exploit code
CVE-2022-36551
Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Label Studio 1.5.0 - Authenticated Server Side Request Forgery (SSRF)2023-03-28 · webapps · python
Impact
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in these versions of Label Studio enabling a remote attacker to create a new account and then exploit the SSRF. This issue is fixed in version 1.6.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | label-studio | < 1.6.0 | 1.6.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Heartex | Label Studio | through 1.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://labelstud.io
- http://packetstormsecurity.com/files/171548/Label-Studio-1.5.0-Server-Side-Request-Forgery.html
- https://github.com/heartexlabs/label-studio/pull/2840
- https://github.com/advisories/GHSA-pc6f-259w-w3j6
- https://nvd.nist.gov/vuln/detail/CVE-2022-36551
- http://heartex.com
- https://github.com/heartexlabs/label-studio/commit/501142cb815ac964b0c600c491885b67386870c2
- https://github.com/heartexlabs/label-studio/releases/tag/1.6.0
- https://github.com/pypa/advisory-database/tree/main/vulns/label-studio/PYSEC-2022-300.yaml