GHSA-cwp8-rm8g-q5c9: Fix Public API Login Bypassing 2FA and Account Lockout via Incomplete Auth Logic

github.com 2026-05-22查看中文 →

Security AdvisoryGHSA-cwp8-rm8g-q5c9HighChurchCRM

Affected:

ChurchCRM/CRM

Referenced CVEs: CVE-2026-44547 · 9.6

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Mojo::JSON Perl Module JSON Parsing DoS via Deep Nesting and Fix 2026-07-06 Radare2 r_core_bin_load Heap Use-After-Free Vulnerability Analysis 2026-07-06 radare2 r_core_bin_load crash due to uninitialized variables analysis 2026-07-06 Signed Integer Overflow in R2 cmd_print Command 2026-07-06 radare2 r_str_word_get0set allocation size overflow vulnerability with PoC 2026-07-06

Offline Archive

Offline screenshot & PDF are Pro-exclusive