CVEbaza.pl › CWE Dictionary › CWE-144

Common Weakness Enumeration

CWE-144

Improper Neutralization of Line Delimiters

Category: VariantCVE: 2

Description

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as line delimiters when they are sent to a downstream component.

Extended Description

As data is parsed, an injected/absent/malformed delimiter may cause the process to take unexpected actions.

CVE vulnerabilities with CWE-144 (2)

8.7

CVSS

HIGH

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed in 1.2.29.

pub. 2025-01-27

7.9

CVSS

HIGH

CVE-2023-39212

Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.

pub. 2023-08-08

Information

ID: CWE-144

Type: Variant

Vulnerabilities: 2

MITRE CWE ↗

← CWE Dictionary