CWE-160: Improper Neutralization of Leading Special Elements

Filter

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes leading special elements that could be interpreted in unexpected ways when they are sent to a downstream component.

What the weakness is: CWE-160 at MITRE. All weaknesses

Ask an AI about CWE-160

ChatGPT Claude Google AI Mode

Show the prompt

Explain CWE-160: Improper Neutralization of Leading Special Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/160.html and https://cve.bz/cve/cwe/160?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

8.1CVE-2010-0386EPSS 1.7%2010-01-25
The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack,…