{"id":"EUVD-2025-210816","revision":"721cb5c183614624943fe27576de5691","records":[{"revision":"721cb5c183614624943fe27576de5691","observedAt":"2026-11-07T01:28:52.251+00:00","statement":{"source":"euvd","id":"EUVD-2025-210816","aliases":["CVE-2025-15613","GHSA-8g8h-v9pm-r6xg"],"title":"Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service configu…","description":"Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality. An attacker with permission to create Kyverno (Cluster)Policies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster services, it also resolves external addresses, allowing requests to an attacker-controlled server. Because policy context data (including contents of Kubernetes resources such as secrets) is sent in these requests, an attacker can exfiltrate sensitive cluster data.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L","score":6.9,"severity":null}],"references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq","https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-210816","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Sep 1, 2026, 11:33:51 AM","dateUpdated":"Sep 1, 2026, 12:15:06 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-210816","identifiers":["EUVD-2025-210816","CVE-2025-15613","GHSA-8g8h-v9pm-r6xg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}