CVE-2023-24686

An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file...

CVE-2023-24686

CVE-2023-24686 affects ChurchCRM v4.5.3 and earlier. The vulnerability resides in the CSV Import function, enabling an attacker to execute arbitrary code by importing a crafted CSV file. The available sources (NVD, RH, OSV, CNVD-style records, CVE feeds) consistently describe the issue as a code-...

CVE-2023-24686

An issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute arbitrary code via importing a crafted CSV file...