Product
An insecure default configuration in blueprintUE Self-Hosted Edition before 4.3.7 allows unauthenticated remote attackers to gain root access to the database via exposed and unauthenticated MariaDB ports.