CVE-2025-14700 — Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server …
Published: 2025-12-17 · CVSS: 9.9 · CVSS 3.1
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7