Home/CWE/Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)
Weakness

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

CWE-75 · Class · Draft

The product does not adequately filter user-controlled input for special elements with control implications.

△

Weakness Relationships

Where this weakness sits in the CWE hierarchy. Walk up to broader classes or down to more specific variants.
Parent of this (broader)
ChildOfCWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Children (more specific)
ParentOfCWE-76 · Improper Neutralization of Equivalent Special Elements
◆

Attack Patterns (CAPEC)

2
How adversaries exploit this weakness, per MITRE CAPEC.
CAPEC-81Web Server Logs Tampering
CAPEC-93Log Injection-Tampering-Forging
⚠

CVEs With This Weakness

34
A sample of the 34 CVEs tagged with this weakness.
CVECVE-2026-31908
CVECVE-2026-29042
CVECVE-2026-27120
CVECVE-2025-61911
CVECVE-2025-50213
CVECVE-2024-9940
CVECVE-2024-39243
CVECVE-2024-39227
CVECVE-2024-37779
CVECVE-2024-35373
CVECVE-2024-31812
CVECVE-2024-31809
◉

Nuclei Scanner Templates

2
Open-source Nuclei templates that detect this weakness class - an actionable scan-for-it pivot. Licensed under the ProjectDiscovery / Nuclei terms.
criticalRocket.Chat <=3.13 - NoSQL Injection
highArcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll
External lookups - second-class, for what we don’t hold ourselves
MITRE CWE
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin