← Back to browse · API

CVE-2025-68110

Severity
CRITICAL
CVSS
10.0
EPSS
0.00416
Risk score
40.15
CISA KEV
No
PoC
No
Published
2025-12-17
Modified
2025-12-18
First seen
2026-08-07
Aliases
CNVD-2026-05359, EUVD-2025-203989
Products
ChurchCRM ChurchCRM <6.5.3, ChurchCRM:crm < 6.5.3
Sources
cnvd CNVD-2026-05359
euvd EUVD-2025-203989

Description

ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue.

References