← Database

CVE-2026-124591

MEDIUM CVSS: 5.5 Published: 2026-11-09 Modified: 2026-11-09

Description

A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

Affected Platforms

Unknown

Weakness Type

CWE-74, CWE-1236

References