← CVE Intelligence

CVE-2025-8110

File overwrite in file update API in Gogs PUBLISHED

Description (CNA)

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

Affected (CNA)

Vendor / product	Versions
Gogs / Gogs	affected 0 through 0.13.3

CWE

CWE-22

References

http://wiz.io/blog/wiz-research-gogs-cve-2025-8110-rce-exploit

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.