BaseFortify

Publication date: 2025-12-08

Last updated on: 2026-04-29

Assigner: VulDB

Description

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-08

Last Modified

2026-04-29

Generated

2026-07-06

AI Q&A

2025-12-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-14229

EUVD

EUVD-2025-201705

Affected Vendors & Products

Vendor	Product	Version / Range
sourcecodester	inventory_management_system	1.0
warren-daloyan	inventory_management_system	1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1236	The product saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by a spreadsheet product.
CWE-74	The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is a CSV injection in the SourceCodester Inventory Management System 1.0, specifically in an unknown function of the SVC Report Export component. It allows an attacker to manipulate CSV files generated by the system, potentially injecting malicious content. The attack can be launched remotely and the exploit has been publicly disclosed.

Impact Analysis

The vulnerability can lead to CSV injection attacks, which may allow an attacker to execute malicious commands or scripts when a user opens the exported CSV file. This can compromise the confidentiality, integrity, and availability of data, potentially leading to data leakage or system compromise.

Hi! I’m here to help you understand CVE-2025-14229. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70