CVE-2019-18641
Published
CVSS v3
9.8
CRITICAL
CVSS v2
7.5
HIGH
Affected
1
PROJECT
Description
Rock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.
An open source CMS, Relationship Management System (RMS) and Church Management System (ChMS) all rolled into one.