Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:52:28 +0000 CVE-2025-66397 — ChurchCRM's Kiosk Manager Functions are vulnerable to Broken Access Control https://vulnerability.circl.lu/vuln/cve-2025-66397 <p><strong>Affected:</strong> ChurchCRM CRM</p> <p>ChurchCRM is an open-source church management system. Prior to version 6.5.3, the allowRegistration, acceptKiosk, reloadKiosk, and identifyKiosk functions in the Kiosk Manager feature suffers from broken access control, allowing any authenticated user to allow and accept kiosk registrations, and perform other Kiosk Manager actions such as reload and identify. Version 6.5.3 fixes the issue.</p> <p><strong>Affected:</strong> ChurchCRM CRM</p> <p>ChurchCRM is an open-source church management system. Prior to version 6.5.3, the allowRegistration, acceptKiosk, reloadKiosk, and identifyKiosk functions in the Kiosk Manager feature suffers from broken access control, allowing any authenticated user to allow and accept kiosk registrations, and perform other Kiosk Manager actions such as reload and identify. Version 6.5.3 fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2025-66397