cve.bz

CVE-2025-14443

6.4 mediumEPSS 0.3%

Medium (6.4). EPSS 0.3% chance of exploitation in the next 30 days.

A flaw was found in ose-openshift-apiserver. This vulnerability allows internal network enumeration, service discovery, limited information disclosure, and potential denial-of-service (DoS) through Server-Side Request Forgery (SSRF) due to missing IP address and network-range validation when processing user-supplied image references.

Severity

CVSS 3.1

6.4 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L
EPSS
0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE
CWE-918
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-gxvv-45f6-3ch8Gogithub.com/openshift/openshift-apiserver4.0.0-alpha.0no fix published
GHSA-gxvv-45f6-3ch8Gogithub.com/openshift/openshift-apiserver<=0.0.0-alpha.0.0.20260130163947-0eb84cd66658no fix published
GO-2026-4578Gogithub.com/openshift/openshift-apiserverall versionsno fix published

References

Check your stackJSON