Label Studio versions prior to 1.18.0 are vulnerable to a Reflected Cross-Site Scripting on '/projects/upload-example/' endpoint. This detection is included in the AI and LLM category.

之前 1.18.0 的 Label Studio 版本在“/projects/upload-example/”端点上存在反射跨站脚本攻击的风险。此检测包含在“AI 和 LLM”类别中。

Label Studio 版本 1.18.0 之前的版本在「/projects/upload-example/」端點上容易受到跨站點反射腳本攻擊。此偵測包含在 AI 和 LLM 類別中。

1.18.0以前のLabel Studioバージョンは、「/projects/upload-example/」エンドポイント上でReflected Cross-Site Scriptingに脆弱です。この検出は、AI および LLM カテゴリに含まれます。

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Label Studio is a multi-type data labeling and annotation tool. A vulnerability in versions prior to
    1.18.0 allows an attacker to inject a malicious script into the context of a web page, which can lead to
    data theft, session hijacking, unauthorized actions on behalf of the user, and other attacks. The
    vulnerability is reproducible when sending a properly formatted request to the `POST /projects/upload-
    example/` endpoint. In the source code, the vulnerability is located at `label_studio/projects/views.py`.
    Version 1.18.0 contains a patch for the issue. (CVE-2025-47783)

ID	名稱	產品	系列	已發布	已更新	嚴重性
114798	Label Studio < 1.18.0 Reflected Cross-Site Scripting	Web App Scanning	Artificial Intelligence	2025/5/22	2025/5/22	high
114798	Label Studio < 1.18.0 反射跨站脚本	Web App Scanning	Artificial Intelligence	2025/5/22	2025/5/22	high
114798	Label Studio < 1.18.0 反映跨站腳本	Web App Scanning	Artificial Intelligence	2025/5/22	2025/5/22	high
114798	ラベルスタジオ< 1.18.0 反映されたクロスサイトスクリプティング	Web App Scanning	Artificial Intelligence	2025/5/22	2025/5/22	high
426279	SCA: security update for label-studio (GHSA-8jhr-wpcm-hh4h)	Tenable Cloud Security	SCA Checks	2025/5/16	2026/8/7	high
426279	SCA: security update for label-studio (GHSA-8jhr-wpcm-hh4h)	Tenable Self-Hosted Container Security	SCA Checks	2025/5/16	2026/8/7	high

偵測

搜尋 Plugin

high

high

high

high

high

high