Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-13281

CVE-2025-13281

MEDIUM5.8

Portworx Half-Blind SSRF in kube-controller-manager

Published Dec 14, 2025

Modified 1 months ago

Details

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoints in the control plane’s host network (including link-local or loopback services).

References

WEBhttp://www.openwall.com/lists/oss-security/2025/12/01/4 WEBhttps://github.com/kubernetes/kubernetes/issues/135525 WEBhttps://groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-13281

CVSS Analysis

CVSS v3.1

5.8

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.8/CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Weakness Type (CWE)

Input Validation

Server-Side Request Forgery (SSRF)

Ecosystems

Timeline

PublishedDec 14, 2025

ModifiedDec 15, 2025

CVE-2025-13281 | Mondoo Vulnerability Intelligence