Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2025-14700

Improper Neutralization of Special Elements Used in a Template Engine in Crafty Controller

Description

An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arcadia Technology, LLC Crafty Controller

Default version status: unaffected

  • 4.6.1affected

References