CWE-93: CRLF Injection
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Also known as Improper Neutralization of CRLF Sequences.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- synology diskstation manager (dsm)An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability in Sharing API in...3.5 Low
- pypa virtualenvvirtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection5.8 Medium
- a2aproject a2a-javaa2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting6.9 Medium
- froxlorfroxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URL9.4 Critical
- froxlorFroxlor before 2.3.12 SSH Key Injection via authorized_keys7.1 High
- unknown metformMetForm < 4.1.9 - Unauthenticated Email Header Injection via Notification Reply-To4.8 Medium
- jetmonsters jetformbuilderJetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email Action4.8 Medium
- ixon vpn clientIXON VPN Client CRLF Injection9.4 Critical
- mongodb libmongocryptAuthenticated KMS request forgery via CRLF injection in GCP key identifier strings5.7 Medium
- pydantic httpx2HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers5.3 Medium
- predisPredis: Redis command injection and denial of service via CRLF smuggling in pipelined commands on aggregate connections9.8 Critical
- nodemailerNodemailer CRLF Injection via List-* Header Comments5.3 Medium
- open-xchange gmbh ox dovecot ce, ox dovecot pro +1 moreMail content stored by a user can be crafted so that it is interpreted as dsync protocol commands...4.8 Medium
- yhirose cpp-httplibcpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing5.3 Medium
- spring framework, vmware spring framework +1 moreServer Sent Event stream corruption in Spring MVC functional web framework9.8 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Server Sent Event stream corruption while rendering fragments9.8 Critical
- dahlia logtape@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys8.6 High
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network could exploit an Improper Neutralization of CRLF...10.0 Critical
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network and under certain conditions could exploit an...9.0 Critical
- cakephpCakePHP through 5.4.3 Email Header Injection via Bare CR/LF in SmtpTransport and MailTransport6.3 Medium
- cakephpCakePHP: SmtpTransport vulnerable to CRLF header injection8.2 High
- No product listedReverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line5.3 Medium
- @fastify/busboy, fastify fastify\/busyboy +1 more@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name5.8 Medium
- mtrudel banditHTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit6.9 Medium
geolensPyPIGeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)No score- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.26.9 Medium
- joomla joomla\!, joomla! project cms +1 moreJoomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.24.8 Medium
- mybbMyBB: Email User CRLF injection5.3 Medium
- rsyncproject rsyncrsync < 3.5.0 Newline Injection via name-converter uid/gid mapping6.9 Medium
- teltonika networks rutos, tswos +1 moreLocal privilege escalation via improper input sanitization in execl() call6.9 Medium
- kitty project kittyKitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences7.3 High
- alseambusher crontab-uialseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter9.8 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection2.3 Low
- bdthemes element pack addons for elementor – elementor widgets, elementor templates, elementor addonsElement Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection5.3 Medium
- rclonerclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines6.4 Medium
- boringproxyboringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation8.5 High
- ufirstgroup ymlrYAML injection via unescaped newlines in ymlr document comments2.1 Low
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +1 more +3 moreMissing input validation / stripping of CRLF characters in SystemConfigManager8.8 High
- nodejs undiciundici vulnerable to CRLF Injection via blob-like body 'type' property4.2 Medium
- heimdall data database proxyHeimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability7.2 High
- superplanehq superplaneSuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title6.3 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +24 more +26 moreSg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export7.6 High
- tp-link systems inc. archer vx1800v v1, tp-link archer vx1800v firmware +1 morePrivilege Escalation via Improper Input Sanitization in TP-Link Archer VX1800v5.1 Medium
- smub wpforms – ai form builder for wordpress – contact forms, payment forms, survey form, quiz & moreWPForms <= 1.10.2 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via Reply-To Display Name5.3 Medium
- jenkins script security, jenkins project script security plugin, red hat openshift developer tools and services +11 more +13 moreJenkins Script Security Plugin has a script security bypass vulnerability7.5 High
skillctlcrates.ioskillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgeryNo score- jasei net::statsite::clientNet::Statsite::Client versions through 1.1.0 for Perl allow metric injections9.1 Critical
- guzzle psr7, guzzlephp psr-7 +1 moreguzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization4.8 Medium
- getkirby kirbyKirby: Request header injection in `Http\Remote`6.9 Medium
- chimurai http-proxy-middlewarehttp-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`7.5 High
- Show moreLoading…