CVE-2023-47117
2 advisories.
PyPI/label-studio CVE-2023-47117: high 7.5, EPSS 4.06%
Label Studio Object Relational Mapper Leak Vulnerability in Filtering Task
Action: Upgrade label-studio to 1.9.2.post0 or later.
pip install label-studio==1.9.2.post0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2.post0 | - |
Fixed versions
| 1.9.2.post0 |
Sources
- osv: GHSA-6hjj-gq77-j4qw
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qw
- https://nvd.nist.gov/vuln/detail/CVE-2023-47117
- https://github.com/HumanSignal/label-studio/commit/f931d9d129002f54a495995774ce7384174cef5c
- https://github.com/HumanSignal/label-studio
- https://github.com/pypa/advisory-database/tree/main/vulns/label-studio/PYSEC-2023-275.yaml
CVE-2023-47117 · published · modified · JSON
PyPI/label-studio CVE-2023-47117: high 7.5, EPSS 4.06%
Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker
Action: Upgrade label-studio to 1.9.2 or later.
pip install label-studio==1.9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: PYSEC-2023-275
- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qw
- https://github.com/HumanSignal/label-studio/commit/f931d9d129002f54a495995774ce7384174cef5c
CVE-2023-47117 · published · modified · JSON