{"id":"EUVD-2025-203310","enisaUuid":"8d226a0a-e4fa-3e45-8f78-0b76cae92c03","description":"A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).","datePublished":"Dec 14, 2025, 9:27:34 PM","dateUpdated":"Dec 15, 2025, 4:26:59 PM","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/kubernetes/kubernetes/issues/135525\nhttps://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ\n","aliases":"CVE-2025-13281\nGHSA-r6j8-c6r2-37rr\n","assigner":"kubernetes","epss":0.39,"enisaIdProduct":[{"id":"32e56144-a1af-3aa3-805e-c4a4a22cca55","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.33.0 ≤v1.33.5"},{"id":"47596115-ab3b-3c9d-b36e-bd514fe4fa7f","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.31.0 ≤v1.31.14"},{"id":"8183ae27-a722-33cc-8d11-fcc3db663c19","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.34.0 ≤v1.34.1"},{"id":"a58414f3-daee-3cc5-82f2-4a6452aae367","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.32.0 ≤v1.32.9"},{"id":"fe435e49-78f5-341c-8012-d566a360eb13","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.30.0 ≤v1.30.14"}],"enisaIdVendor":[{"id":"a29071ed-01bc-3716-880e-8fb5ff2ffaed","vendor":{"name":"Kubernetes"}}],"enisaIdVulnerability":[{"id":"a2fc28f3-f62b-340c-bb6a-4758519a05d8","vulnerability":{"id":"GHSA-r6j8-c6r2-37rr","description":"kube-controller-manager is vulnerable to half-blind Server Side Request Forgery through in-tree Portworx StorageClass","datePublished":"Dec 15, 2025, 12:30:25 AM","dateUpdated":"Dec 20, 2025, 3:27:50 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-13281\nhttps://github.com/kubernetes/kubernetes/issues/135525\nhttps://github.com/kubernetes/kubernetes/commit/7506ce804c20696ba32cdb72126270ceaed06e24\nhttps://github.com/kubernetes/kubernetes/commit/97650c1c4fe15cbb7756ba95b3edc8a8665063ca\nhttps://github.com/kubernetes/kubernetes/commit/dbe17dfe7773563eac95534040f413ada6d2b421\nhttps://github.com/advisories/GHSA-r6j8-c6r2-37rr\nhttps://github.com/kubernetes/kubernetes\nhttps://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ\nhttp://www.openwall.com/lists/oss-security/2025/12/01/4\n","enisa_id":"EUVD-2025-203310\n","aliases":"CVE-2025-13281\nGHSA-r6j8-c6r2-37rr\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ae08c997-e236-350c-8d52-779f985b2dd1","vulnerability":{"id":"CVE-2025-13281","description":"A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).","datePublished":"Dec 14, 2025, 9:27:34 PM","dateUpdated":"Dec 15, 2025, 4:26:59 PM","status":"PUBLISHED","baseScore":5.8,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","references":"https://github.com/kubernetes/kubernetes/issues/135525\nhttps://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ\n","enisa_id":"EUVD-2025-203310\n","assigner":"kubernetes","epss":0.39,"dataProcessed":"Oct 31, 2026, 7:17:21 AM","vulnerabilityProduct":[{"id":"514a7371-83a9-3923-b0ab-07a60459a6e3","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.32.0 ≤v1.32.9"},{"id":"65104a4e-cdcb-3725-acb2-901b8ca636ed","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.31.0 ≤v1.31.14"},{"id":"d0b032e3-a976-3b87-8b94-05ebeb9189fa","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.30.0 ≤v1.30.14"},{"id":"eb484973-7591-319e-ba2c-237fc8ad85e0","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.33.0 ≤v1.33.5"},{"id":"f84dd7ea-b121-39e4-bdab-39dab139e80e","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}},"product_version":"v1.34.0 ≤v1.34.1"}],"vulnerabilityVendor":[{"id":"1e23db37-09ef-3a06-97e7-29c8cbe341f3","vendor":{"name":"Kubernetes"}}]}}],"enisaIdAdvisory":[{"id":"398d1c2a-249e-3d83-b186-812c5c77f7c9","advisory":{"id":"msrc_CVE-2025-13281","description":"Portworx Half-Blind SSRF in kube-controller-manager","datePublished":"Dec 2, 2025, 12:00:00 AM","dateUpdated":"Jan 8, 2026, 2:44:38 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-13281.json\n","aliases":"CVE-2025-13281\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"297505f3-04d2-3aec-abdd-c97ca17cb4fc","product":{"name":"cbl2 kubernetes 1.28.4-21","vendor":{"name":"Microsoft"}}},{"id":"4b15a8c2-a6f3-3f43-a274-7f638a791c78","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"5fad2f25-3742-39ee-90bc-e85e6a5efc6d","product":{"name":"2.0","vendor":{"name":"Smiths Medical"}}},{"id":"6eb342c1-5edf-3761-b73e-613ae6e6abd7","product":{"name":"Kubernetes","vendor":{"name":"Kubernetes"}}},{"id":"a3cbb965-57d9-3020-b9b4-9a0f8d77466a","product":{"name":"\u003cazl3 kubernetes 1.30.10-16","vendor":{"name":"Microsoft"}}},{"id":"af670bdb-d698-3adc-8968-a5601d2b94ae","product":{"name":"azl3 kubernetes 1.30.10-16","vendor":{"name":"Microsoft"}}},{"id":"bf33573b-cc42-33a3-aa39-cc31eb7961e2","product":{"name":"\u003ccbl2 kubernetes 1.28.4-19","vendor":{"name":"Microsoft"}}},{"id":"cac8a293-2a4e-3145-a239-66f66ca9e455","product":{"name":"azl3 kubernetes 1.30.10-18","vendor":{"name":"Microsoft"}}},{"id":"d25b63c4-c3fb-354a-bc12-246175eee1b2","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"dcbc4774-cd73-3b8a-ab62-b32aa1134933","product":{"name":"cbl2 kubernetes 1.28.4-19","vendor":{"name":"Microsoft"}}},{"id":"fdec7708-0872-376c-9084-742e7370a693","product":{"name":"\u003ccbl2 kubernetes 1.28.4-21","vendor":{"name":"Microsoft"}}}]}}]}