Server-Side Request Forgery (SSRF)

🗓️ 23 Mar 2026 06:43:19Reported by Veracode Vulnerability DatabaseType

Portworx StorageClass in Kubernetes enables server-side forgery due to poor validation, leaking data.

Reporter	Title	Published	Views	Family All 81
AlpineLinux	CVE-2025-13281	14 Dec 202521:27	–	alpinelinux
IBM Security Bulletins	Security Bulletin: ELM on Hybrid Cloud vulnerabilities addressed in 1.3.0	9 Mar 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities for EDB Cloudpack for Data CP4D 5.3.1	1 Apr 202606:00	–	ibm
CBLMariner	CVE-2025-13281 affecting package kubernetes for versions less than 1.30.10-18	12 Jan 202621:27	–	cbl_mariner
CBLMariner	CVE-2025-13281 affecting package kubernetes for versions less than 1.28.4-21	7 Jan 202619:09	–	cbl_mariner
Chainguard	CVE-2025-13281 vulnerabilities	17 Dec 202513:23	–	cgr
Circl	CVE-2025-13281	1 Dec 202516:37	–	circl
CNNVD	Kubernetes 安全漏洞	14 Dec 202500:00	–	cnnvd
CVE	CVE-2025-13281	14 Dec 202521:27	–	cve
Cvelist	CVE-2025-13281 Portworx Half-Blind SSRF in kube-controller-manager	14 Dec 202521:27	–	cvelist

Vulners

Node

kubernetes k8s.io/kubernetesRangev1.33.0-alpha.0–1.33.0-alpha.0go

kubernetes k8s.io/kubernetesRangev1.34.0-alpha.0–1.34.0-alpha.0go

kubernetes k8s.io/kubernetesRange1.33.0-alpha.0–1.33.4go

Source	Link
groups	www.groups.google.com/g/kubernetes-security-announce/c/EORqZg0k1l4/m/TtD-q0v7AgAJ
github	www.github.com/kubernetes/kubernetes/commit/97650c1c4fe15cbb7756ba95b3edc8a8665063ca
github	www.github.com/kubernetes/kubernetes/commit/7506ce804c20696ba32cdb72126270ceaed06e24
github	www.github.com/kubernetes/kubernetes/commit/dbe17dfe7773563eac95534040f413ada6d2b421
github	www.github.com/advisories/GHSA-r6j8-c6r2-37rr
openwall	www.openwall.com/lists/oss-security/2025/12/01/4

03 Jun 2026 09:44Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.8

EPSS0.00011

SSVC