CWE-142: Improper Neutralization of Value Delimiters

low-risk

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as value delimiters when they are sent to a downstream component.

Abstraction: Variant

Common Consequences

Integrity Unexpected State

Real-World Examples (1)

CVE CVSS EPSS KEV
CVE-2025-61962 5.9 0.1%
0
/ 100
low-risk
Active Threat 0/50 · Minimal
Exploit Availability 0/50 · Minimal