Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config

Summary

On all Label Studio versions prior to 1.11.0, data imported via file upload feature is not properly sanitized prior to being rendered within a `Choices` or `Labels` tag, resulting in an XSS vulnerability. Details Need permission to use the "data import" function. This was reproduced on Label Studio 1.10.1. PoC 1. Create a project. Create a project 2. Upload a file containing the payload using the "Upload Files" function. 2 Upload a file containing the payload using the Upload Files function 3 complete The following are the contents of the files used in the PoC ``` { "data": { "prompt": "labelstudio universe image", "images": [ { "value": "id123#0", "style": "margin: 5px", "html": "<img width='400' src='https://labelstud.io/_astro/images-tab.64279c16_ZaBSvC.avif' onload=alert(document.cookie)>" } ] } } ``` 3. Select the text-to-image generation labeling template of Ranking and scoring 3 Select the text-to-image generation labelling template for Ranking and scoring 5 save 4. Select a task 4 Select a task 5. Check that the script is running 5 Check that the script is running Impact Malicious scripts can be injected into the code, and when linked with vulnerabilities such as CSRF, it can cause even greater damage. In particular, It can become a source of further attacks, especially when linked to social engineering.

Timeline

1. Feb 22, 2024, 9:52 PM UTCCVE published
2. Feb 23, 2024, 2:32 PM UTCCISA SSVC assessment

   Exploitation: poc · Automatable: no · Technical impact: partial

3. Aug 14, 2024, 3:32 PM UTCRecord last updated

Affected versions

• HumanSignal label-studio

  fixed in 1.11.0

• label-studioPyPI

  fixed in 1.11.0

• label-studioPyPI

  fixed in 1.11.0

References 4