Horizon Alert
Summary of the vulnerability and why it matters
This advisory concerns a critical vulnerability in the ChurchCRM management system that could allow an authenticated administrator to execute arbitrary code on the server. The flaw is related to how file uploads are handled during the backup restore process, potentially enabling an attacker to overwrite critical configuration files.
- Authenticated users could run unauthorized code.
- Affects systems managing church operations and data.
- Confirm if ChurchCRM is used and assess exposure.
Attack Path
How an attacker could exploit the issue
An attacker could gain control of a ChurchCRM server by exploiting a path traversal flaw in the backup restore feature. This would require the attacker to first gain administrator access to the system. Once authenticated, the attacker could upload a malicious file disguised as a backup, which could overwrite critical server configuration files and lead to remote code execution.
- Authenticated administrator access required.
- Upload arbitrary files via backup restore.
- Remote code execution.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability could allow an authenticated administrator to upload arbitrary files, potentially leading to remote code execution by overwriting critical server configuration files. This could affect the integrity and availability of the ChurchCRM system and any data it manages.
- System configuration files.
- Uploading malicious files.
- System compromise or data loss.
Operational Fix
Recommended remediation, mitigation, and detection steps
Application owners responsible for ChurchCRM instances should lead remediation efforts, coordinating with infrastructure teams for deployment and network/security teams for exposure assessment. The initial step involves identifying all ChurchCRM deployments, confirming their reachability and criticality, and then locating the accountable system owner to prioritize and schedule the fix.
- Application owners are responsible.
- Verify all ChurchCRM instance reachability.
- Plan remediation in the next maintenance window.
