Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.4epss 0.2%
probabilidade de exploração
0.2%top 86% das CVEs
exploração observada
nãonenhuma fonte reporta
Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N
Produtos afetados
HumanSignal · label-studioReferências
https://github.com/HumanSignal/label-studiohttps://github.com/HumanSignal/label-studio/blob/1.23.0/label_studio/webhooks/utils.pyhttps://github.com/HumanSignal/label-studio/commit/2c1c1d6472153032af8ed399168f814bea854e3ehttps://github.com/HumanSignal/label-studio/issues/9801https://www.vulncheck.com/advisories/label-studio-through-1.23.0-ssrf-via-unvalidated-webhook-url