CVE-2025-14700 - Improper Neutralization of Special Elements Used in a Template Engine in Crafty ...

CVE-2025-14700 - Improper Neutralization of Special Elements Used in a Template Engine in Crafty ...

CVE ID : CVE-2025-14700 Published : Dec. 17, 2025, 1:15 a.m. | 1 hour, 10 minutes ago Description : An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection. Severity: 9.9 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
CRITICAL
Published
Dec. 17, 2025
Impact: remote code execution

Source: Telegram CVE Monitor