CVE-2023-47116 Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
Attackers can bypass SSRF protections in Label Studio to access internal web servers via DNS rebinding or redirection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-47116?
CVE-2023-47116 is a medium-severity server-side request forgery vulnerability in HumanSignal label-studio, published on 31 Jan 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.
Weakness: CWE-918
Which versions are affected by CVE-2023-47116?
3 open source packages ship an affected version, including label-studio. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
label-studio PyPI | All versions | 1.11.0 |
label-studio PyPI | All versions | 1.11.0 |
label-studio PyPI | All versions | 1.11.0 |
Products include Humansignal Label Studio.
How do I fix CVE-2023-47116?
Upgrade label-studio to 1.11.0 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2023-47116 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-47116 exists.
Other vulnerabilities in HumanSignal label-studio
- CVE-2023-43791 Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
- CVE-2026-22033 Label Studio vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
- CVE-2025-25297 Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
- CVE-2025-47783 label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.
- CVE-2023-47117 Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio
Sources
Also known as GHSA-p59w-9gqw-wj8r, PYSEC-2024-127.