Database Server (db.shopstack-staging.local):

PostgreSQL 12.3 (CVE-2022-1552, CVSS 8.8) - Remote connections from any IP (pg_hba.conf misconfiguration) - Weak password on postgres user