Three new lessons just dropped: LLM Slopsquatting, CSS Injection, and CORS Try new lessons
Hacksplaining
Log in Sign up Train your team
  1. Home
  2. /
  3. Glossary
  4. /
  5. CRLF Injection

CRLF Injection

Injecting carriage return (CR: \r) and line feed (LF: \n) characters causes multiple vulnerabilities.

CRLF injection allows log forgery and HTTP response splitting.

Further Reading

  • MITRE CWE-93: CRLF Injection
  • OWASP: CRLF Injection
All glossary terms
Hacksplaining

Defend your code.

Learn

All Lessons LLM Prompt Injection SQL Injection XSS CSRF

Teams

For Teams Features Pricing FAQ

Resources

Glossary OWASP Top 10 PCI Compliance Book

Legal

Privacy Terms DPA Subprocessors

© 2026 Hacksplaining. Built with in Seattle, WA, USA

About Us · Need help? Reach out to support@hacksplaining.com