Description
Label Studio存在XSS漏洞，攻击者可以利用漏洞获取用户敏感信息
Label Studio存在XSS漏洞(CVE-2025-25296)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-25296
https://github.com/advisories/GHSA-wpq5-3366-mqw4
https://security.snyk.io/vuln/SNYK-PYTHON-LABELSTUDIO-8730848
https://access.redhat.com/security/cve/cve-2025-25296
https://getsafety.com/vulnerabilities/SFTY-20250214-66582
https://www.appsecure.security/vulnerability-database/cve-2025-25296/
https://sploitus.com/exploit?id=B2C54B30-DF3D-5379-96BE-FDA2EE468D70
https://avd.aquasec.com/nvd/2025/cve-2025-25296/