The product does not adequately filter user-controlled input for special elements with control implications.
View on MITREProgramming languages and supporting technologies might be chosen which are not subject to these issues.
Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.
No detection method information available for this CWE.
No examples or observed CVEs available for this CWE.
No relationship information available for this CWE.
CWE-75: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The product does not adequately filter user-controlled input for special elements with control implications.
If exploited, CWE-75 (Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)) it can compromise Integrity, Confidentiality and Availability, leading to outcomes such as Modify Application Data and Execute Unauthorized Code or Commands.
Recommended mitigations for CWE-75 include: Programming languages and supporting technologies might be chosen which are not subject to these issues. Utilize an appropriate mix of allowlist and denylist parsing to filter special element syntax from all input.
CWE-75 commonly affects Not Language-Specific. Note that weaknesses are often language-agnostic patterns, so secure coding practices apply broadly.
A CWE (Common Weakness Enumeration) like CWE-75 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.