CVE-2025-13281CWE-918ssrf

CVE-2025-13281

Medium · published December 15, 2025

CVSS v3.1
5.8
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

The record
Technical detail
CVSS v3.1
5.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-12-15T03:15Z
References (3)
https://github.com/kubernetes/kubernetes/issues/135525 · [email protected]https://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ · [email protected]http://www.openwall.com/lists/oss-security/2025/12/01/4 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 14 DEC 21:27Z
    Portworx Half-Blind SSRF in kube-controller-manager
    cvelistv5