CWE-143Variant

Improper Neutralization of Record Delimiters

Draft in the CWE catalog · 1 CVE mapped

1
CVEs mapped
6.3
Median CVSS
What it is

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as record delimiters when they are sent to a downstream component.

Recent examples
6.3cvss
CVE-2025-1774

Logs manipulation in BotSense

Incorrect string encoding vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. A field with additional field separator characters or values can be included in the "extraData" field.This issue affects BotSense in versions before 2.8.0.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-143
Abstraction
Variant
Structure
Simple
Status
Draft