Denial of Service Vulnerability in Forgejo Attachment Component
CVE-2025-68971
6.5MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-68971?
In Forgejo versions up to 13.0.3, a vulnerability in the attachment component can lead to a denial of service. This occurs when users can upload multi-gigabyte file attachments to issues or releases, potentially consuming excessive resources and disrupting accessibility for legitimate users. Mitigation measures should be taken to limit file upload sizes and ensure overall system integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.