CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-12-10
Gogs Git Service PutContents API Symbolic Link Handling Remote Code Execution Vulnerability Analysis and Mitigation (CVE-2025-8110)
[Affected Scope] All active deployments of Gogs Git service utilizing the vulnerable PutContents API.
[Impact] An authenticated attacker with low privileges can exploit improper symbolic link validation to overwrite arbitrary system files, leading to Remote Code Execution (RCE).
[Mitigation] Immediately upgrade Gogs to the latest patched version and restrict repository creation and write permissions for untrusted users.