File Write Vulnerability in Forgejo Product Line from Codeberg

CVE-2025-68937

What is CVE-2025-68937?

A vulnerability in Forgejo allows attackers to write to unintended files due to improper handling of out-of-repository symlink destinations within template repositories. This can potentially grant unauthorized access to server shell. To mitigate this risk, users are advised to update to Forgejo version 13.0.2 or later, as well as version 11.0.7 or later for the LTS branch.

References