.. / CVE-2023-47115

• XSS
• Nuclei
• Web

Exploit for Label Studio - Cross-Site Scripting (CVE-2023-47115)

Description:

Versions prior to 1.9.2 have a cross-site scripting (XSS) vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website.

Nuclei Template

View the template here CVE-2023-47115.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-47115.yaml

References: