ChurchCRM discloses database information on error message
Résumé
ChurchCRM discloses database information on error message
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ChurchCRM is an open-source church management system. Versions prior to 6.5.3 may disclose database information in an error message including the host, ip, username, and password. Version 6.5.3 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov