Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-25295 PoC — Label Studio 安全漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%BA%BA%E5%B7%A5%E6%99%BA%E8%83%BD%E6%BC%8F%E6%B4%9E/Label%20Studio%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E%20CVE-2025-25295.md
Associated Vulnerability
Title:Label Studio 安全漏洞 (CVE-2025-25295)
Description:Label Studio是Heartex开源的一个开源数据标注工具。允许您使用简单明了的 UI 标记音频、文本、图像、视频和时间序列等数据类型，并导出为各种模型格式。 Label Studio 1.16.0之前版本存在安全漏洞，该漏洞源于存在路径遍历漏洞，允许在预期目录结构之外进行未经授权的文件访问。
File Snapshot

 # Label Studio 任意文件读取漏洞 CVE-2025-25295

## 漏洞描述

Label Studio 是一款开源数据标注工具。它拥有简洁易用的用户界面，支持标注音频、文本、图像、

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.