cve.bz

CWE-144: Improper Neutralization of Line Delimiters

Filter

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as line delimiters when they are sent to a downstream component.

What the weakness is: CWE-144 at MITRE. All weaknesses

Ask an AI about CWE-144

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-144: Improper Neutralization of Line Delimiters and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/144.html and https://cve.bz/cve/cwe/144?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.2CVE-2026-107823EPSS 0.8%

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account…

  2. 5.3CVE-2026-53878EPSS 0.3%

    An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in domain names (unless used via a form field, since `CharField` strips newlines). If an application uses values wit…

  3. 8.7CVE-2025-24367ExploitEPSS 59%

    Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote…

  4. 5.5CVE-2023-39212EPSS 0.2%

    Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.