What’s Vulnerable › Vulnerabilities

CVE-2025-14531: code-projects Rental Management System Log Transaction.java crlf injection

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-11 · updated 2026-10-07
• Weakness: CWE-74

Description

A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made public and could be used.

Affected products

• code-projects Rental Management System: 2.0

References

• https://code-projects.org/
• https://github.com/asd1238525/cve/blob/main/CRLF.md
• https://vuldb.com/?ctiid.335872
• https://vuldb.com/?id.335872
• https://vuldb.com/?submit.703239

Get alerted when CVE-2025-14531 or the next vulnerability affects your stack