CWE-144: Improper Neutralization of Line Delimiters
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as line delimiters when they are sent to a downstream component.
3 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-24367 — Cacti allows Arbitrary File Creation leading to RCE
- CVE-2026-53878 — Header injection possibility since DomainNameValidator accepted newlines in input
Recently published
- CVE-2026-53878 — Header injection possibility since DomainNameValidator accepted newlines in input
- CVE-2025-24367 — Cacti allows Arbitrary File Creation leading to RCE