VULNERABILITY INTELLIGENCE

CVE-2025-8110

CVSS score8.8 HIGH
EPSS probability85.20%
CISA KEVKnown exploited vulnerability
Published2025-12-10
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Gogs Path Traversal Vulnerability

Vendor / product: Gogs / Gogs

Description

Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.

Weakness classification

  • 9947ef80-c5d5-474a-bbab-97341a59000e: CWE-22

Primary references