CVE-2023-47116

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Jan 31, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-471177.5Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users CVE-2023-471189.8ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap CVE-2023-471196.1Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-47129.8A vulnerability, which was classified as critical, was found in Xintian Smart Table Integrated Management System 5.6.9. This affects an unkn CVE-2023-471207.5Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,bet CVE-2023-471219.8Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-471225.3Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.0, Rekor public keys CVE-2023-471235.4iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an XSS attack can be p CVE-2023-471245.9Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew CVE-2023-471256.1TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions DOM processing instructions CVE-2023-471265.3TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the sta CVE-2023-471275.4TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least