CWE-93
Improper Neutralization of CRLF Sequences ('CRLF Injection')
About
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Common consequences
- Integrity → Modify Application Data
Mitigations
- Implementation: Avoid using CRLF as a special sequence.
- Implementation: Appropriately filter or quote CRLF sequences in user-controlled input.
CVEs with this weakness
Frequently asked questions
What is CWE-93?
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs. Common consequences Integrity → Modify Application Data Mitigations Implementation: Avoid using CRLF as a special sequence. Implementation: Appropriately filter or quote CRLF sequences in user-controlled input.
How many CVEs does Rainforest track for CWE-93?
Rainforest Labs currently tracks 1 published CVEs mapped to CWE-93. They are listed on this page.
Empower Your Security Strategy with Rainforest
Discover vulnerabilities early, prioritize critical threats, and protect what truly matters. Rainforest streamlines your security operations, saving you time and reducing costs, so you can focus on what drives your business forward.