CVE-2025-68971 - Vulnerability Analysis

Overview

Forgejo <= 13.0.3 contains a denial of service caused by uploading multi-gigabyte file attachments in the attachment component, letting attackers cause service disruption, exploit requires ability to upload large files.

Severity & Score

Impact

Attackers can cause service disruption by uploading very large files, leading to denial of service.

Mitigation

Update to the latest version beyond 13.0.3.

References

• https://codeberg.org/forgejo/forgejo
• https://zenodo.org/records/18945481
• https://zenodo.org/records/19058493
• https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291973

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner