CWE-93: CRLF Injection
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Also known as Improper Neutralization of CRLF Sequences.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- tp-link systems inc. archer be805 v1 UPnP Newline Injection Vulnerability in TP-Link Archer BE805 5.3 Medium
- jetbrains hub In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible 5.0 Medium
- mpv-player mpv mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlines 7.7 High
- zbateson mail-mime-parser zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders 6.9 Medium
- azuracast AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist 5.1 Medium
- No product listed HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI No score
- opnsense core OPNsense: Configuration line injection via multiple GUI text fields 8.1 High
- opnsense core OPNsense core through 26.7.8 NTP Configuration Injection via GPS and PPS Fudge Fields 6.0 Medium
- opnsense core OPNsense before 26.7.8 Wireless WPA Configuration Line Injection via Identity 6.1 Medium
- cakephp CakePHP through 5.4.3 MIME Header Injection via FormDataPart Content-Type 6.3 Medium
- supsysticcom contact form by supsystic Contact Form by Supsystic < 1.11.1 - Unauthenticated CRLF / Email Header Injection via Reply-To Field Mapping 3.7 Low
- libressl LibreSSL ocspcheck through 4.4.0 CRLF Injection via AIA OCSP URL Path 6.3 Medium
- libressl LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line 6.3 Medium
- oray pugongying x5 pro Oray Pugongying X5 Pro Dnsmasq crlf injection 9.3 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro L2TP Authentication crlf injection 9.4 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection 9.4 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro Dnsmasq crlf injection 9.4 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro SNMP snmp_set crlf injection 9.4 Critical
- oray pugongying x5 pro Oray Pugongying X5 Pro Ser2net crlf injection 9.4 Critical
- synacor zimbra collaboration suite, zimbra collaboration suite +1 more Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address 4.3 Medium
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection... 7.1 High
- pypa virtualenv virtualenv: Venv configuration readback can reinterpret path boundaries 2.0 Low
- armorx global technology spam ArmorX Global Technology｜ArmorX Spam - Command Injection 7.1 High
- bulwarkmail webmail Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A... 7.1 High
- markjaquith subscribe to comments Subscribe to Comments 2.3 - 2.3.2 - Author+ Email Header Injection via From Name Setting 3.8 Low
- netgate pfsense ce, pfsense +1 more Netgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php 5.1 Medium
- netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php 5.1 Medium
- netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting 7.5 High
- netgate pfsense ce Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid 8.6 High
- netgate pfsense ce, pfsense +1 more Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username 7.5 High
- freerdp FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token 6.3 Medium
- eclipse vert.x CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages 6.9 Medium
- brocade fabric os, broadcom fabric operating system +1 more Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache... 6.8 Medium
- brocade fabric os, broadcom fabric operating system +1 more An input validation and output encoding vulnerability exists in the web management interface of... 6.9 Medium
- openprinting cups CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix) 2.5 Low
- corazawaf coraza OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields 5.8 Medium
- accellion kiteworks, kiteworks core +1 more Kiteworks Core Command Execution through Configuration Injection 6.3 Medium
- accellion kiteworks, kiteworks core +1 more Kiteworks Core Server-Side Request Forgery through CRLF Injection 6.6 Medium
- psyb0t docker-mailbox Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox 9.4 Critical
- froxlor froxlor before 2.3.12 CRLF Injection via validateUrl userinfo 8.5 High
- [unknown] networkmanager-vpnc Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection 7.8 High
- [unknown] networkmanager-vpnc Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username 7.8 High
- gnome networkmanager-fortisslvpn Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials 7.8 High
- zbateson mail-mime-parser zbateson/mail-mime-parser has CRLF header injection via attachment filename 7.2 High
- checkmk gmbh checkmk Livestatus injection via monitoring filter values 5.3 Medium
- openwrt luci-app-adblock-fast luci-app-adblock-fast: Delegated `luci-app-adblock-fast` users can reach root command execution by injecting newline-separated cron entries 8.8 High
- st engineering idirect evo idx, idx +1 more ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting 5.3 Medium
- exim Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent... 4.0 Medium
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 more Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419) 7.5 High
- synology diskstation manager (dsm) An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in... 8.0 High
- Show olderLoading…