Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in these versions of Label Studio enabling a remote attacker to create a new account and then exploit the SSRF.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Heartex Label Studio 代码问题漏洞
Vulnerability Description
Label Studio是Heartex开源的一个开源数据标注工具。允许您使用简单明了的 UI 标记音频、文本、图像、视频和时间序列等数据类型，并导出为各种模型格式。 Heartex Label Studio Community Edition 1.5.0及之前版本存在代码问题漏洞，该漏洞源于数据导入模块中的服务器端请求伪造(SSRF)，允许经过身份验证的用户访问系统上的任意文件。
CVSS Information
N/A
Vulnerability Type
N/A