| Submission Date | Release Date | Submitter | Organization | Version | Comment |
|---|---|---|---|---|---|
| 2006-07-19 | 2006-07-19 | PLOVER | N/A | Draft 3 | N/A |
Submission Date: 2006-07-19
Release Date: 2006-07-19
Submitter: PLOVER
Organization: N/A
Version: Draft 3
Comment:
N/A
| Modification Date | Release Date | Modifier | Organization | Version | Importance | Comment |
|---|---|---|---|---|---|---|
| 2008-07-01 | N/A | Eric Dalci | Cigital | N/A | N/A | updated References, Potential_Mitigations, Time_of_Introduction |
| 2008-09-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships, Observed_Example, Other_Notes, References, Taxonomy_Mappings |
| 2008-10-14 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description |
| 2008-11-24 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description, Other_Notes |
| 2009-03-10 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples |
| 2009-05-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Name |
| 2009-07-27 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples, Potential_Mitigations |
| 2009-10-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences, Description, Other_Notes, Theoretical_Notes |
| 2010-02-16 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Taxonomy_Mappings |
| 2010-06-21 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Description, Name |
| 2011-03-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2011-06-01 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences, Description |
| 2012-05-11 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Common_Consequences, References, Relationships |
| 2012-10-30 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2014-06-23 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Demonstrative_Examples |
| 2014-07-30 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships, Taxonomy_Mappings |
| 2015-12-07 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2017-05-03 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Related_Attack_Patterns |
| 2017-11-08 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Applicable_Platforms, Demonstrative_Examples |
| 2019-06-20 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2020-02-24 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Applicable_Platforms, Potential_Mitigations, Relationships, Type |
| 2020-06-25 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Potential_Mitigations |
| 2021-10-28 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Relationships |
| 2022-06-28 | 2022-06-28 | CWE Content Team | MITRE | 4.8 | N/A | Extended the abstraction of this entry to include both HTTP request and response splitting. |
| 2022-06-28 | 2022-06-28 | CWE Content Team | MITRE | 4.8 | N/A | updated Alternate_Terms, Common_Consequences, Demonstrative_Examples, Description, Name, Observed_Examples, Potential_Mitigations, References, Relationships, Theoretical_Notes |
| 2022-10-13 | 2022-10-13 | CWE Content Team | MITRE | 4.9 | N/A | updated Demonstrative_Examples, Related_Attack_Patterns |
| 2023-01-31 | 2023-01-31 | CWE Content Team | MITRE | 4.10 | N/A | updated Description |
| 2023-04-27 | 2023-04-23 | CWE Content Team | MITRE | 4.11 | N/A | updated Detection_Factors, References, Relationships |
| 2023-06-29 | N/A | CWE Content Team | MITRE | N/A | N/A | updated Mapping_Notes |
| 2024-11-19 | 2024-11-19 | CWE Content Team | MITRE | 4.16 | N/A | updated Demonstrative_Examples |
Modification Date: 2008-07-01
Release Date: N/A
Modifier: Eric Dalci
Organization: Cigital
Version: N/A
Importance: N/A
Comment:
updated References, Potential_Mitigations, Time_of_Introduction
Modification Date: 2008-09-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships, Observed_Example, Other_Notes, References, Taxonomy_Mappings
Modification Date: 2008-10-14
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description
Modification Date: 2008-11-24
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description, Other_Notes
Modification Date: 2009-03-10
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples
Modification Date: 2009-05-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Name
Modification Date: 2009-07-27
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples, Potential_Mitigations
Modification Date: 2009-10-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences, Description, Other_Notes, Theoretical_Notes
Modification Date: 2010-02-16
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Taxonomy_Mappings
Modification Date: 2010-06-21
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Description, Name
Modification Date: 2011-03-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2011-06-01
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences, Description
Modification Date: 2012-05-11
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Common_Consequences, References, Relationships
Modification Date: 2012-10-30
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2014-06-23
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Demonstrative_Examples
Modification Date: 2014-07-30
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships, Taxonomy_Mappings
Modification Date: 2015-12-07
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2017-05-03
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Related_Attack_Patterns
Modification Date: 2017-11-08
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Applicable_Platforms, Demonstrative_Examples
Modification Date: 2019-06-20
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2020-02-24
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Applicable_Platforms, Potential_Mitigations, Relationships, Type
Modification Date: 2020-06-25
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Potential_Mitigations
Modification Date: 2021-10-28
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Relationships
Modification Date: 2022-06-28
Release Date: 2022-06-28
Modifier: CWE Content Team
Organization: MITRE
Version: 4.8
Importance: N/A
Comment:
Extended the abstraction of this entry to include both HTTP request and response splitting.
Modification Date: 2022-06-28
Release Date: 2022-06-28
Modifier: CWE Content Team
Organization: MITRE
Version: 4.8
Importance: N/A
Comment:
updated Alternate_Terms, Common_Consequences, Demonstrative_Examples, Description, Name, Observed_Examples, Potential_Mitigations, References, Relationships, Theoretical_Notes
Modification Date: 2022-10-13
Release Date: 2022-10-13
Modifier: CWE Content Team
Organization: MITRE
Version: 4.9
Importance: N/A
Comment:
updated Demonstrative_Examples, Related_Attack_Patterns
Modification Date: 2023-01-31
Release Date: 2023-01-31
Modifier: CWE Content Team
Organization: MITRE
Version: 4.10
Importance: N/A
Comment:
updated Description
Modification Date: 2023-04-27
Release Date: 2023-04-23
Modifier: CWE Content Team
Organization: MITRE
Version: 4.11
Importance: N/A
Comment:
updated Detection_Factors, References, Relationships
Modification Date: 2023-06-29
Release Date: N/A
Modifier: CWE Content Team
Organization: MITRE
Version: N/A
Importance: N/A
Comment:
updated Mapping_Notes
Modification Date: 2024-11-19
Release Date: 2024-11-19
Modifier: CWE Content Team
Organization: MITRE
Version: 4.16
Importance: N/A
Comment:
updated Demonstrative_Examples
| Contributor Date | Release Date | Type | Contributor | Organization | Version | Comment |
|---|---|---|---|---|---|---|
| 2022-02-25 | 2022-10-13 | Content | Jonathan Leitschuh | Dan Kaminsky Fellowship @ HUMAN Security | 4.9 | Suggested a new entry for HTTP Request Splitting, leading to scope expansion for CWE-113 |
Contributor Date: 2022-02-25
Release Date: 2022-10-13
Type: Content
Contributor: Jonathan Leitschuh
Organization: Dan Kaminsky Fellowship @ HUMAN Security
Version: 4.9
Comment:
Suggested a new entry for HTTP Request Splitting, leading to scope expansion for CWE-113
| Change Date | Previous Entry Name | Version |
|---|---|---|
| 2008-04-11 | HTTP Response Splitting | Draft 9 |
| 2009-05-27 | Failure to Sanitize CRLF Sequences in HTTP Headers (aka 'HTTP Response Splitting') | 1.4 |
| 2010-06-21 | Failure to Sanitize CRLF Sequences in HTTP Headers ('HTTP Response Splitting') | 1.9 |
| 2022-06-28 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') | 4.8 |
Change Date: 2008-04-11
Version: Draft 9
Previous Entry Name: HTTP Response Splitting
Change Date: 2009-05-27
Version: 1.4
Previous Entry Name: Failure to Sanitize CRLF Sequences in HTTP Headers (aka 'HTTP Response Splitting')
Change Date: 2010-06-21
Version: 1.9
Previous Entry Name: Failure to Sanitize CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
Change Date: 2022-06-28
Version: 4.8
Previous Entry Name: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')