CWE-93: CRLF Injection
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Also known as Improper Neutralization of CRLF Sequences.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- kallithea-scm kallitheaKallithea CRLF injection vulnerability5.0 Medium
- cisco telepresence tc softwareCRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on...5.0 Medium
- moodleMoodle CRLF Injection Vulnerability in Calendar Component5.0 Medium
- joomla joomla\!Joomla! vulnerable to CRLF injection4.3 Medium
- matthieu aubry phpmyvisitesCRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject...7.5 High