CVE-2025-14229: SourceCodester Inventory Management System SVC Report Export csv injection

Published Dec 8, 2025

Updated

A security vulnerability has been detected in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the component SVC Report Export. Such manipulation leads to csv injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Affected Software

2 affected components

Sourcecodester Inventory Management System=1.0

Warren-daloyan Inventory Management System=1.0

Event History

Dec 8, 2025

CVE Published

via MITRE·11:02 AM

Data Sourced

via MITRE·11:02 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-14229?

CVE-2025-14229 has a moderate severity level due to its potential for remote exploitation via CSV injection.

How do I fix CVE-2025-14229?

To fix CVE-2025-14229, patch the SourceCodester Inventory Management System to a newer version that addresses the CSV injection vulnerability.

What component is affected in CVE-2025-14229?

CVE-2025-14229 affects the SVC Report Export component of the SourceCodester Inventory Management System.

Can CVE-2025-14229 be exploited remotely?

Yes, CVE-2025-14229 can be exploited remotely, allowing attackers to manipulate the system from a distance.

What type of attack does CVE-2025-14229 facilitate?

CVE-2025-14229 facilitates CSV injection attacks that can compromise data integrity.