HumanSignal kayıtları
humansignal üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %81,8
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-20 Improper Input Validation1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2023-43791İstismar yok | Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokenshumansignal · label studio · CWE-200 | Yüksek8,8 | — | %1,2 | 9 Kas 2023 |
34İzleyin | CVE-2026-22033İstismar yok | Label Studio vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys fieldhumansignal · label studio · CWE-79 | Yüksek8,6 | — | %0,2 | 12 Oca 2026 |
31İzleyin | CVE-2023-47117Kavram kanıtı | Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studiohumansignal · label studio · CWE-200 | Yüksek7,5 | — | %4,0 | 13 Kas 2023 |
30İzleyin | CVE-2025-25297İstismar yok | Label Studio allows Server-Side Request Forgery in the S3 Storage Endpointhumansignal · label studio · CWE-918 | Yüksek7,7 | — | %0,6 | 14 Şub 2025 |
30İzleyin | CVE-2025-47783Kavram kanıtı | label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.humansignal · label studio · CWE-79 | Yüksek7,6 | — | %0,5 | 14 May 2025 |
25İzleyin | CVE-2024-26152İstismar yok | Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling confighumansignal · label studio · CWE-79 | Orta6,1 | — | %2,2 | 22 Şub 2024 |
25İzleyin | CVE-2025-25296Kavram kanıtı | Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpointhumansignal · label studio · CWE-79 | Orta6,1 | — | %1,8 | 14 Şub 2025 |
24İzleyin | CVE-2024-23633İstismar yok | Label Studio XSS Vulnerability on Data Importhumansignal · label studio · CWE-79 | Orta6,1 | — | %0,5 | 23 Oca 2024 |
21İzleyin | CVE-2023-47115Kavram kanıtı | Label Studio XSS Vulnerability on Avatar Uploadhumansignal · label studio · CWE-79 | Orta5,4 | — | %1,4 | 23 Oca 2024 |
21İzleyin | CVE-2023-47116İstismar yok | Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protectionshumansignal · label studio · CWE-918 | Orta5,3 | — | %0,7 | 31 Oca 2024 |
19İzleyin | CVE-2025-5173İstismar yok | HumanSignal label-studio-ml-backend PT File neural_nets.py load deserializationhumansignal · label studio ml backend · CWE-20 | Orta4,8 | — | %0,2 | 26 May 2025 |
- CVE-2023-4379135İzleyin
Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
YüksekCVSS 8,8İstismar yokEPSS %1humansignal · label studio9 Kas 2023
- CVE-2026-2203334İzleyin
Label Studio vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field
YüksekCVSS 8,6İstismar yokEPSS %0humansignal · label studio12 Oca 2026
- CVE-2023-4711731İzleyin
Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio
YüksekCVSS 7,5Kavram kanıtıEPSS %4humansignal · label studio13 Kas 2023
- CVE-2025-2529730İzleyin
Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
YüksekCVSS 7,7İstismar yokEPSS %0humansignal · label studio14 Şub 2025
- CVE-2025-4778330İzleyin
label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.
YüksekCVSS 7,6Kavram kanıtıEPSS %0humansignal · label studio14 May 2025
- CVE-2024-2615225İzleyin
Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config
OrtaCVSS 6,1İstismar yokEPSS %2humansignal · label studio22 Şub 2024
- CVE-2025-2529625İzleyin
Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint
OrtaCVSS 6,1Kavram kanıtıEPSS %1humansignal · label studio14 Şub 2025
- CVE-2024-2363324İzleyin
Label Studio XSS Vulnerability on Data Import
OrtaCVSS 6,1İstismar yokEPSS %0humansignal · label studio23 Oca 2024
- CVE-2023-4711521İzleyin
Label Studio XSS Vulnerability on Avatar Upload
OrtaCVSS 5,4Kavram kanıtıEPSS %1humansignal · label studio23 Oca 2024
- CVE-2023-4711621İzleyin
Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
OrtaCVSS 5,3İstismar yokEPSS %0humansignal · label studio31 Oca 2024
- CVE-2025-517319İzleyin
HumanSignal label-studio-ml-backend PT File neural_nets.py load deserialization
OrtaCVSS 4,8İstismar yokEPSS %0humansignal · label studio ml backend26 May 2025