Vulnerability Details CVE-2025-14700
An input neutralization vulnerability in the Webhook Template component of Crafty Controller allows a remote, authenticated attacker to perform remote code execution via Server Side Template Injection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 45.4%
CVSS Severity
CVSS v3 Score 9.9
Products affected by CVE-2025-14700
-
cpe:2.3:a:craftycontrol:crafty_controller:4.6.1