Description
ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session tokens, then authenticate as administrator without credentials for complete application takeover.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| sgoudelis | ground-station | < 0.8.0 | 0.8.0 |
References
- GitHub Security Advisory (GHSA-3mqj-q84c-crjq) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: ground-station before 0.8.0 Authentication Bypass via setup.restore third-party-advisory