CVE-2025-25296 Information

Description

Label Studio is an open source data labeling tool. Prior to version 1.16.0 Label Studio’s /projects/upload-example endpoint allows injection of arbitrary HTML through a GET request with an appropriately crafted label_config query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP) it is only set in report-only mode making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims’ browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims’ contexts potentially allowing theft of sensitive data session hijacking or other malicious actions. Version 1.16.0 contains a patch for the issue.

Reference

https://github.com/HumanSignal/label-studio/commit/8cf6958e1e27ef6a03ed287e674470975d340885 https://github.com/HumanSignal/label-studio/security/advisories/GHSA-wpq5-3366-mqw4