CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax

The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.

Published:30 Jan 2008

Organization:MITRE

Modified:11 Dec 2025

Related Weakness

CWE-116: Improper Encoding or Escaping of Output

Details