CVE-2025-14531 MEDIUM

CVE-2025-14531: code-projects Rental Management System Log Transaction.java crlf injection

Vendor Code-Projects

Product Rental Management System

Weakness CWE-93 · CRLF injection

Published December 11, 2025

Last update December 11, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Key dates

Disclosure timeline

December 11, 2025 CVE published

December 11, 2025 Record updated