Description
Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endpoints. Attackers can access other tenants' cloud storage objects by creating a separate organization and supplying arbitrary file URIs to presign or stream bucket contents.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
HumanSignal label-studio
Default version status: unaffected
0 to ≤ 1.23.0affected
pkg:pypi/label-studioReferences
- https://github.com/HumanSignal/label-studio/issues/9924 ↗
- https://github.com/HumanSignal/label-studio ↗
- https://github.com/HumanSignal/label-studio/blob/1.23.0/label_studio/io_storages/proxy_api.py ↗
- https://www.vulncheck.com/advisories/label-studio-through-1.23.0-cross-organization-storage-uri-resolution ↗