A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could be used.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/asd1238525/cve/blob/main/CRLF.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.335872 | Permissions Required VDB Entry |
| https://vuldb.com/?id.335872 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.703239 | Third Party Advisory VDB Entry |
Configurations
History
16 Dec 2025, 19:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Carmelo rental Management System
Carmelo |
|
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/asd1238525/cve/blob/main/CRLF.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.335872 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.335872 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.703239 - Third Party Advisory, VDB Entry | |
| CPE | cpe:2.3:a:carmelo:rental_management_system:2.0:*:*:*:*:*:*:* |
11 Dec 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-11 19:15
Updated : 2025-12-16 19:02
NVD link : CVE-2025-14531
Mitre link : CVE-2025-14531
CVE.ORG link : CVE-2025-14531
JSON object : View
Products Affected
carmelo
- rental_management_system