Horizon Alert
Summary of the vulnerability and why it matters
This advisory addresses a critical security flaw in the ChurchCRM software, a system used for managing church data. The vulnerability allows attackers to remotely execute code on servers during the initial setup phase, potentially leading to a complete compromise of the server. The issue stems from improperly handled input during the installation process, posing a significant risk to the confidentiality, integrity, and availability of the system and its data.
- Flaw allows remote code execution during setup.
- Critical flaw, impacts server security.
- Confirm relevance and assess exposure.
Attack Path
How an attacker could exploit the issue
An attacker can gain control of a ChurchCRM server by exploiting a flaw in the setup wizard during installation. Because the database password input is not properly secured, an unauthenticated attacker can inject malicious PHP code, allowing them to run any command on the server.
- Attacker can access setup wizard remotely.
- Unsanitized input allows code injection.
- Complete server compromise is possible.
Live Threat
Current exploitation, exposure, and threat context
During the initial installation of ChurchCRM, an unauthenticated attacker could inject arbitrary PHP code by exploiting a lack of sanitization in the database password variable. This could lead to the compromise of the entire server when the setup wizard is accessible.
- Server code execution.
- Unsanitized input during setup.
- Complete server compromise.
Operational Fix
Recommended remediation, mitigation, and detection steps
The ChurchCRM application owner is responsible for addressing this vulnerability, as it impacts the core management system. The first step is to identify all instances of ChurchCRM, determine their accessibility and criticality, and then plan remediation.
- Application owners must resolve.
- Verify all ChurchCRM deployments.
- Plan risk-based remediation efforts.
