PT-2023-19737

CVE-2023-24686

Published

2023-02-09

Updated

2025-03-24

CVSS 3.1

4.8

Medium

MetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ChurchCRM versions 4.5.3 and below

Description The issue concerns the CSV Import function, which allows attackers to execute arbitrary code by importing a crafted CSV file.

Recommendations For ChurchCRM versions 4.5.3 and below, update to a version above 4.5.3 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾