{"id":"CVE-2026-124591","published":"2026-11-09T11:17:24.743","lastModified":"2026-11-09T23:17:20.320","description":"A vulnerability was detected in Bahleel 0.1.0/0.1.1. Affected is the function fputcsv of the file app/Exporters/CsvExporter.php. The manipulation results in csv injection. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.","cvssScore":5.5,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","cwes":["CWE-74","CWE-1236"],"vendors":[],"products":[],"references":[{"url":"https://github.com/bahleel/bahleel/","tags":[]},{"url":"https://github.com/bahleel/bahleel/issues/1","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-124591","tags":[]},{"url":"https://vuldb.com/submit/1040551","tags":[]},{"url":"https://vuldb.com/vuln/433015","tags":[]},{"url":"https://vuldb.com/vuln/433015/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/bahleel/bahleel/","tags":[]},{"url":"https://github.com/bahleel/bahleel/issues/1","tags":[]}],"hasPoc":true,"ai":null}