← CVE Intelligence

CVE-2025-68110

ChurchCRM discloses database information on error message PUBLISHED

Description (CNA)

ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue.

Affected (CNA)

Vendor / productVersions
ChurchCRM / CRMaffected < 6.5.3

CWE

CWE-200, CWE-209

References

ADP enrichment

CISA-ADP

No English description supplied.