{"cve":"CVE-2023-47116","nvd":{"published":"2024-01-31T17:15:13.370","modified":"2026-06-17T06:32:11.097","status":"Modified","description":"Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","score":5.3},"cwes":["CWE-918"],"references":["https://github.com/HumanSignal/label-studio/commit/55dd6af4716b92f2bb213fe461d1ffbc380c6a64","https://github.com/HumanSignal/label-studio/releases/tag/1.11.0","https://github.com/HumanSignal/label-studio/security/advisories/GHSA-p59w-9gqw-wj8r","https://github.com/HumanSignal/label-studio/commit/55dd6af4716b92f2bb213fe461d1ffbc380c6a64","https://github.com/HumanSignal/label-studio/releases/tag/1.11.0"],"products":["humansignal:label_studio"],"source":"nvd","synced_at":"2026-10-19T21:44:57.175229480+00:00"},"epss":{"cve":"CVE-2023-47116","score":0.00737,"percentile":0.54508,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-p59w-9gqw-wj8r","url":"https://osv.dev/vulnerability/GHSA-p59w-9gqw-wj8r","summary":"Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections","modified":"2026-09-10T03:50:05.055225353Z","packages":[{"ecosystem":"PyPI","name":"label-studio","purl":"pkg:pypi/label-studio","ranges":["<1.11.0"],"fixed":["1.11.0"]}]},{"id":"PYSEC-2024-127","url":"https://osv.dev/vulnerability/PYSEC-2024-127","summary":"","modified":"2024-11-21T14:57:24.914836Z","packages":[{"ecosystem":"PyPI","name":"label-studio","purl":"pkg:pypi/label-studio","ranges":["<1.11.0"],"fixed":["1.11.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}