{
  "node_id": "mitre-capec-capec-134-email-injection",
  "title": "MITRE CAPEC-134: Email Injection (Standard Attack Pattern - Medium Severity)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE CAPEC-134 (Email Injection) is a standard-level attack pattern in the MITRE Common Attack Pattern Enumeration and Classification. An adversary manipulates the headers and content of an email message by injecting data via the use of delimiter characters native to the protocol. Likelihood of attack: Unknown. Typical severity: Medium. Parent pattern for CAPEC-41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads. Maps to weaknesses CWE-150.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_attack"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-sp-800-53-r5",
    "iso-27001-2022",
    "cis-controls-v8",
    "owasp-asvs-l2"
  ],
  "primary_citations_count": 7
}