CWE-147
Overview
- CWE ID
- 147
- CWE Name
- Improper Neutralization of Input Terminators
- CWE Abstraction
- Variant
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.
Extended Description
For example, a "." in SMTP signifies the end of mail message data, whereas a null character can be used for the end of a string.
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 138 | 1000 | ChildOf | Primary |
Related CVEs
| CVE |
|---|
| CVE-2024-52505 |