CVE-2023-47117

Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the application allows users to insecurely set filters for filtering tasks. An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper (ORM). Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by character. In addition, Label Studio had a hard coded secret key that an attacker can use to forge a session token of any user by exploiting this ORM Leak vulnerability to leak account password hashes. This vulnerability has been addressed in commit `f931d9d129` which is included in the 1.9.2post0 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-200

• https://github.com/HumanSignal/label-studio/commit/f931d9d129002f54a495995774ce7384174cef5cPatch
• https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qwExploit, Mitigation, Vendor Advisory
• https://github.com/HumanSignal/label-studio/commit/f931d9d129002f54a495995774ce7384174cef5cPatch
• https://github.com/HumanSignal/label-studio/security/advisories/GHSA-6hjj-gq77-j4qwExploit, Mitigation, Vendor Advisory

Published

Nov 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47111ZITADEL provides identity infrastructure. ZITADEL provides a…3.7
• CVE-2023-47112Rundeck is an open source automation service with a web cons…4.3
• CVE-2023-47113BleachBit cleans files to free disk space and to maintain pr…7.3
• CVE-2023-47114Fides is an open-source privacy engineering platform for man…6.1
• CVE-2023-47115Label Studio is an a popular open source data labeling tool.…5.4
• CVE-2023-47116Label Studio is a popular open source data labeling tool. Th…5.3
• CVE-2023-47118ClickHouse® is an open-source column-oriented database manag…9.8
• CVE-2023-47119Discourse is an open source platform for community discussio…6.1
• CVE-2023-4712A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-47120Discourse is an open source platform for community discussio…7.5
• CVE-2023-47121Discourse is an open source platform for community discussio…9.8
• CVE-2023-47122Gitsign is software for keyless Git signing using Sigstore. …5.3