CWE-162: Improper Neutralization of Trailing Special Elements
Filter
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes trailing special elements that could be interpreted in unexpected ways when they are sent to a downstream component.
What the weakness is: CWE-162 at MITRE. All weaknesses
Related attack patterns (CAPEC): 1
- CAPEC-635 Alternative Execution Due to Deceptive Filenames Severity: High
The attack patterns MITRE's CAPEC relates to CWE-162, as MITRE names them. Credits.
Ask an AI about CWE-162
Show the prompt
Explain CWE-162: Improper Neutralization of Trailing Special Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/162.html and https://cve.bz/cve/cwe/162?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 2.1CVE-2026-47241EPSS 0.4%
Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent CRLF injection and then sent v…