Exploit for goga

kitploit · 2026-08-25

Description

goga CVE-2025-8110 vulnerability affecting the tools component.

Parametercontent · path

Pathapi/v1/repos/<owner>/<repo>/contents/*

Symlink-following flaw in PUT contents API allows writing through a symlink (e.g., to .git/config) enabling RCE when combined with a subsequent push.

Gogs≤ 0.13.3

8.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Attack Requirements:NONE

Privileges Required:LOW

User Interaction:NONE

Modified:2026-08-25 06:59

Last Seen:2026-08-26 01:48

Reporter:KitPloit

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-111DDEA-GOGA-CVE-2025-8110
이 저장소에는 README가 없습니다.