CVE-2025-14700

概要

参考情報

• gitlab.com/crafty-controller/crafty-4/-/issues/646 · Broken Link

crafty controller のその他の脆弱性

• CVE-2026-13716緊急 9.1Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbit…
• CVE-2026-5652緊急 9.0An insecure direct object reference vulnerability in the Users API component of Crafty Controller allows a remote, authenticated attacker to…
• CVE-2026-0963高 8.8An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated atta…
• CVE-2026-0805高 8.8An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to …
• CVE-2025-14701高 7.1An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform…