CWE-93

Overview
  • CWE ID
  • 93
  • CWE Name
  • Improper Neutralization of CRLF Sequences ('CRLF Injection')
  • CWE Abstraction
  • Base
  • CWE structure
  • Simple
  • CWE Status
  • Draft
Description
The software uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Extended Description
Related CWEs
CWE ID View ID Nature Ordinal
74 1000 ChildOf Primary
117 1000 CanPrecede