{"id":"CVE-2025-68937","title":"Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories","summary":"Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11…","severity":"none","cwe":["CWE-61"],"published":"2025-12-26","updated":"2026-10-13","sourceUpdated":"2026-10-13T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68937","references":[{"url":"https://blog.gitea.com/release-of-1.24.7/","label":"cve@mitre.org"},{"url":"https://codeberg.org/forgejo/forgejo/milestone/27340","label":"cve@mitre.org"},{"url":"https://codeberg.org/forgejo/forgejo/milestone/29156","label":"cve@mitre.org"},{"url":"https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/11.0.7.md","label":"cve@mitre.org"},{"url":"https://codeberg.org/forgejo/forgejo/src/branch/forgejo/release-notes-published/13.0.2.md","label":"cve@mitre.org"},{"url":"https://codeberg.org/forgejo/security-announcements/issues/43","label":"cve@mitre.org"}],"tags":["nvd","exploit-available"],"epss":0.00501,"epssPercentile":0.42687,"exploits":{"github":1,"githubRepos":["https://github.com/ClemaX/Gitea-Forgejo-CVE-2025-68937"],"checkedAt":"2026-10-27T16:49:39.045Z"},"exploitAvailable":true,"ingestedAt":"2026-10-13T10:22:03.521Z","slug":"CVE-2025-68937","body":"## Overview\n\nForgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-of-repository symlink destinations for template repositories. This is also fixed for 11 LTS in 11.0.7 and later.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}