label-studio-signup: Label Studio - Sign-up Detect

日期: 2025-08-01 | 影响软件: Label Studio | POC: 已公开

漏洞描述

Detects the presence of the Label Studio sign-up.

PoC代码[已公开]

id: label-studio-signup

info:
  name: Label Studio - Sign-up Detect
  author: DhiyaneshDK
  severity: unknown
  description: |
    Detects the presence of the Label Studio sign-up.
  classification:
    cpe: cpe:2.3:a:heartex:label_studio:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: heartex
    product: label_studio
    shodan-query: http.favicon.hash:-1649949475
  tags: label-studio,sign-up,misconfig,vuln

http:
  - raw:
      - |
        GET /user/signup HTTP/1.1
        Host: {{Hostname}}
        Accept: */*

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Label Studio"
          - "Sign up"
          - "Create Account"
        condition: and

      - type: status
        status:
          - 200
# digest: 490a0046304402204c160aff097f53f9807e26965556c09f654e23441c2974a6b60267fa81cae08b022022ee56625af7b4c4e2dfc29690c2bbb9c3989f681ba1b399a60f37b5c2aab08d:922c64590222798bb761d5b6d8e72950

相关漏洞推荐