Forgejo Denial-of-Service Vulnerability via Multi-Gigabyte File Upload

A denial-of-service vulnerability has been identified in Forgejo versions through 13.0.3. The issue arises in the attachment component, where users can upload excessively large files, potentially reaching several gigabytes in size. This capability can be exploited by associating such large attachments with issues or releases, leading to resource exhaustion.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, where the application becomes unresponsive or unavailable due to the excessive resource consumption from the large file uploads.