CVE-2025-14700 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code exec…
Critical CVSS: 9.9

CVE-2025-14700

An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Vendor
Craftycontrol
Product
Crafty Controller
CWE
CWE-1336
Yayın Tarihi
2025-12-17 01:15:59
Güncelleme
2025-12-23 21:17:59
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

CWE-1336 Crafty Controller CRITICAL Craftycontrol 2025

Referanslar

https://gitlab.com/crafty-controller/crafty-4/-/issues/646