CVE-2025-47282

Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user with administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot cluster, to obtain control over the seed cluster where the shoot cluster is managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. The affected component is `gardener/external-dns-management`. The `external-dns-management` component may also be deployed on the seeds by the `gardener/gardener-extension-shoot-dns-service` extension when the extension is enabled. In this case, all versions of the `shoot-dns-service` extension `<= v1.60.0` are affected by this vulnerability. Version 0.23.6 of Gardener External DNS Management fixes the issue.

• CWE-20

• https://github.com/gardener/external-dns-management/security/advisories/GHSA-xwgg-m7fx-83wx

Published

May 19, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-47277vLLM, an inference and serving engine for large language mod…9.8
• CVE-2025-47278Flask is a web server gateway interface (WSGI) web applicati…1.8
• CVE-2025-47279Undici is an HTTP/1.1 client for Node.js. Prior to versions …3.1
• CVE-2025-4728A vulnerability was found in SourceCodester Best Online News…9.8
• CVE-2025-47280Umbraco Forms is a form builder that integrates with the Umb…6.1
• CVE-2025-47281Kyverno is a policy engine designed for cloud native platfor…7.7
• CVE-2025-47283Gardener implements the automated management and operation o…9.9
• CVE-2025-47284Gardener implements the automated management and operation o…9.9
• CVE-2025-47285Vyper is the Pythonic Programming Language for the Ethereum …2.9
• CVE-2025-47286Combodo iTop is a web based IT service management tool. In v…7.2
• CVE-2025-47287Tornado is a Python web framework and asynchronous networkin…7.5
• CVE-2025-47288Discourse Policy plugin gives the ability to confirm users h…3.5