GHSA-5952-4gv2-m5gjMediumCVSS 5.4
A vulnerability has been found in DataLinkDC dinky up to 1.2.5. Affected by this issue is the...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability has been found in DataLinkDC dinky up to 1.2.5. Affected by this issue is the function CatalogueController.upload of the file dinky-admin/src/main/java/org/dinky/controller/CatalogueController.java of the component Catalogue Upload API. The manipulation leads to path traversal. The attack is possible to be carried out remotely. The researcher claims to have submitted a GHSA on the repository of the project.
🔗 References (8)
- https://github.com/DataLinkDC/dinky/security/advisories/GHSA-vqj5-2vxg-f4mq
- https://nvd.nist.gov/vuln/detail/CVE-2026-124572
- https://github.com/DataLinkDC/dinky
- https://vuldb.com/cve/CVE-2026-124572
- https://vuldb.com/submit/1036005
- https://vuldb.com/vuln/432918
- https://vuldb.com/vuln/432918/cti
- https://github.com/advisories/GHSA-5952-4gv2-m5gj