Skip to content
OpenAdvisories

Weakness (CWE)

CWE-93: Improper Neutralization of CRLF Sequences

Base Draft

The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

How to prevent it (2 mitigations)

  1. Implementation

    Avoid using CRLF as a special sequence.

  2. Implementation

    Appropriately filter or quote CRLF sequences in user-controlled input.

Source: MITRE CWE-93

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-61884 Exploited · Ransomware Public exploit EPSS 96%

    Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions…

    Oracle Oracle Configurator
    KEV Oct 20, 2025