CVE-2025-68937 PoC — Forgejo 安全漏洞

Source

https://github.com/ClemaX/Gitea-Forgejo-CVE-2025-68937

Associated Vulnerability

Title: Forgejo 安全漏洞 (CVE-2025-68937)
Description:Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.

Description

Directory traversal in Gitea and Forgejo's repository‑template processing allows remote authenticated attackers to process arbitrary files on the filesystem, leading to remote code execution.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →