CVE-2023-43791
There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability that can be chained within the ORM Leak vulnerability to impersonate any account on Label Studio. An attacker could exploit these vulnerabilities to escalate their privileges from a low privilege user to a Django Super Administrator user. The vulnerability was found to affect versions before `1.8.2`, where a patch was introduced.
- CVSS 3.1
- 8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.24% probability · 67th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- humansignal/label studio
- Source
- security-advisories@github.com
References
- https://github.com/HumanSignal/label-studio/commit/3d06c5131c15600621e08b06f07d976887cde81bPatch
- https://github.com/HumanSignal/label-studio/pull/4690Patch
- https://github.com/HumanSignal/label-studio/releases/tag/1.8.2Release Notes
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-f475-x83m-rx5mExploit, Vendor Advisory
- https://github.com/HumanSignal/label-studio/commit/3d06c5131c15600621e08b06f07d976887cde81bPatch
- https://github.com/HumanSignal/label-studio/pull/4690Patch
- https://github.com/HumanSignal/label-studio/releases/tag/1.8.2Release Notes
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-f475-x83m-rx5mExploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.