Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36384
HistoryJul 18, 2022 - 8:36 a.m.

Carriage Return And Line Feed (CLRF) Injection

2022-07-1808:36:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
vulnerable
crlf injection
powershell
cmd.exe
windows systems
attacker
input
line feed character

EPSS

0.002

Percentile

59.3%

shescape is vulnerable to carriage return line feed (CRLF) injection. User provided data for Powershell and cmd.exe on Windows systems are not escaped sufficiently, allowing an attacker to input a line feed character (‘\n’).

EPSS

0.002

Percentile

59.3%

Related for VERACODE:36384