CVE-2025-14700
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
Summary
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
Original description
The description as published by the source.
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com