CVE-2025-15613 Kyverno before v1.13.4 SSRF via Service Call

Kyverno before v1.13.4 is vulnerable to server-side request forgery SSRF via its Service Call functionality. An attacker with permission to create Kyverno ClusterPolicies can specify an external URL in a policy's apiCall/service configuration; although Service Call is documented for in-cluster...