by Kastro
Paper/Archive/CVE-2025-68937

CVE-2025-68937

Forgejo Forgejo — Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of o…

EPSS 0.5%CVSS 9.5
critical.is priorityof 100
37
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 42.9.429 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.

Affected

ProductAffectedFixed inSource
Forgejo12.0.0 – < 13.0.213.0.2CNA
Forgejo< 11.0.711.0.7CNA

Scores by source

mitre (CNA)9.5CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcodeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.2.mdrefcodeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.7.mdrefcodeberg.org/forgejo/forgejo/milestone/29156refcodeberg.org/forgejo/forgejo/milestone/27340refcodeberg.org/forgejo/security-announcements/issues/43refblog.gitea.com/release-of-1.24.7