Threats tagged 'ghsa-8hhc-85h8-34q6'

Northstar versions up to 9.1.1 enable the H2 Console without proper authentication, exposing the /h2-console endpoint. The authentication interceptor only protects /northstar/** paths, leaving /h2-console accessible without credentials. The embedded H2 database uses the default 'sa' user with an empty password. This misconfiguration allows any network-reachable attacker to execute arbitrary system commands via the CREATE ALIAS feature, resulting in pre-authentication remote code execution.