{"id":"EUVD-2025-203310","revision":"697354f0c6ab428ea917bbf526e4c5eb","records":[{"revision":"697354f0c6ab428ea917bbf526e4c5eb","observedAt":"2026-11-05T01:00:38.932+00:00","statement":{"source":"euvd","id":"EUVD-2025-203310","aliases":["CVE-2025-13281","GHSA-r6j8-c6r2-37rr"],"title":"A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoint…","description":"A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N","score":5.8,"severity":null}],"references":["https://github.com/kubernetes/kubernetes/issues/135525","https://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-203310","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 14, 2025, 9:27:34 PM","dateUpdated":"Dec 15, 2025, 4:26:59 PM"},"relatedAdvisories":[{"id":"msrc_CVE-2025-13281","title":"Portworx Half-Blind SSRF in kube-controller-manager","vulnerabilityIds":["CVE-2025-13281"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-203310","identifiers":["EUVD-2025-203310","CVE-2025-13281","GHSA-r6j8-c6r2-37rr"]},"retained":false,"historicalAffected":[]}],"coverage":[]}