Skip to content
OpenAdvisories

Weakness (CWE)

CWE-93: Improper Neutralization of CRLF Sequences

Base Draft

The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.

How to prevent it (2 mitigations)

  1. Implementation

    Avoid using CRLF as a special sequence.

  2. Implementation

    Appropriately filter or quote CRLF sequences in user-controlled input.

Source: MITRE CWE-93

All Critical High Medium Low Exploited only Public exploit

284 results · Feed

  • Medium 6.4
    CVE-2016-3115 Public exploit EPSS 36%

    Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users t…

    openssh openssh Debian Ubuntu
  • Critical 9.8
    CVE-2015-5285 Public exploit

    Kallithea CRLF injection vulnerability

    CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

    kallithea PyPI
  • Medium —
    CVE-2011-4203

    Moodle CRLF Injection Vulnerability in Calendar Component

    CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via …

    moodle/moodle moodle Ubuntu Packagist
  • Medium —
    CVE-2007-4190

    Joomla! vulnerable to CRLF injection

    CRLF injection vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-si…

    joomla/application Packagist