Common Weakness Enumeration

    CWE Definition / CWE-97

    CWE-97: Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

    The product generates a web page, but does not neutralize or incorrectly neutralizes user-controllable input that could be interpreted as a server-side include (SSI) directive.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-96: Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')