Skip to content
OpenAdvisories
Critical · 10.0 CVE-2025-68110 EUVD-2025-203989

ChurchCRM discloses database information on error message

Published Dec 17, 2025 · Updated Dec 18, 2025 · Assigned by GitHub_M

Description

ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue.

Affected products

VendorProductAffectedFixed
ChurchCRM CRM < 6.5.3 —

References