CVE-2025-14700
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
Résumé
Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com