CVE-2025-8110

CVE-2025-8110 - Gogs symlink bypass - arbitrary file write as the Gogs process user Gogs //contents/. Gogs follows the symlink and writes attacker-controlled bytes to the link target with the privileges of the Gogs process. When Gogs runs as root this is an arbitrary root file write - e.g. drop a...