{"schema_version":"1.7.3","id":"GHSA-xwgg-m7fx-83wx","published":"2025-05-19T19:12:48Z","modified":"2025-05-23T16:13:17.817202Z","aliases":["CVE-2025-47282","GO-2025-3697"],"summary":"Gardener External DNS Management allows malicious google credential in DNS secret to lead to privilege escalation","details":"A security vulnerability was discovered in Gardener that could allow a user with administrative privileges for a Gardener project or a user with administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot cluster, to obtain control over the seed cluster where the shoot cluster is managed.\n\n### Am I Vulnerable?\n\nThis CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters.\n\n### Affected Components\n\n- `gardener/external-dns-management`\n\n### Affected Versions\n\n- < 0.23.6\n\n### Fixed Versions\n\n- &gt;= 0.23.6\n\n### Important\n\nThe `external-dns-management` component may also be deployed on the seeds by the https://github.com/gardener/gardener-extension-shoot-dns-service extension when the extension is enabled. In this case, all versions of the `shoot-dns-service` extension `<= v1.60.0` are affected by this vulnerability.\n\n### How do I mitigate this vulnerability?\n\nUpdate to a fixed version.","affected":[{"package":{"name":"github.com/gardener/external-dns-management","ecosystem":"Go","purl":"pkg:golang/github.com/gardener/external-dns-management"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.23.6"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-xwgg-m7fx-83wx/GHSA-xwgg-m7fx-83wx.json"}},{"package":{"name":"github.com/gardener/gardener-extension-shoot-dns-service","ecosystem":"Go","purl":"pkg:golang/github.com/gardener/gardener-extension-shoot-dns-service"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"last_affected":"1.6.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/05/GHSA-xwgg-m7fx-83wx/GHSA-xwgg-m7fx-83wx.json"}}],"references":[{"type":"WEB","url":"https://github.com/gardener/external-dns-management/security/advisories/GHSA-xwgg-m7fx-83wx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47282"},{"type":"PACKAGE","url":"https://github.com/gardener/external-dns-management"}],"database_specific":{"cwe_ids":["CWE-20","CWE-269"],"github_reviewed":true,"github_reviewed_at":"2025-05-19T19:12:48Z","nvd_published_at":"2025-05-19T18:15:30Z","severity":"CRITICAL"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}]}