CVE-2025-14700
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
概要
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com