Database Exposure Vulnerability in Church Management System by ChurchCRM
CVE-2025-68110

10CRITICAL

Key Information:

Vendor

Churchcrm

Status
Crm
Vendor
CVE Published:
17 December 2025

What is CVE-2025-68110?

An issue in the ChurchCRM church management system allows prior versions to inadvertently expose sensitive database information in error messages. This may include crucial details such as the database host, IP address, username, and password, potentially leading to unauthorized access or data breaches. The vulnerability has been addressed in version 6.5.3, which eliminates the risk of such disclosures. Users are encouraged to update to the latest version to ensure their systems are secure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CRM < 6.5.3

References

https://github.com/ChurchCRM/CRM/security/advisories/GHSA...
x_refsource_CONFIRM

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.