CVE-2025-8110

CVE-2025-8110 - Gogs symlink bypass: arbitrary file write as the Gogs process user PoC Proof-of-concept for CVE-2025-8110, a symlink-following flaw in Gogs //contents/. Gogs follows the symlink and writes attacker-controlled bytes to the link target with the privileges of the Gogs process. When...