CVE-2021-29398: Globalnorthstar Northstar Club Management

Medium severity, CVSS 5.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauthenticated users to browse and list the directories across the entire filesystem of the host of the web application.

Affected products

• Globalnorthstar Northstar Club Management: version 6.3 only

Published 2022-02-04. Last modified 2026-06-17.