CyberRota Analysis
AI-GeneratedA server-side request forgery (SSRF) vulnerability exists in HumanSignal Label Studio versions prior to 1.24.0.dev0 due to the default setting of SSRF_PROTECTION_ENABLED being false. This allows authenticated users to exploit the import-from-URL endpoint to access internal services and cloud metadata endpoints, potentially exposing sensitive resources. Organizations using this software should prioritize remediation to mitigate the risk of unauthorized access to internal systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default. The import-from-URL endpoint fetches any caller-supplied URL including internal loopback addresses on the default installation. An authenticated user can use this to reach internal services, cloud metadata endpoints, and other resources not intended for external access.