DataLinkDC Dinky vulnerabilities
9 published CVEs name DataLinkDC Dinky among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124572
DataLinkDC dinky Catalogue Upload API CatalogueController.java CatalogueController.upload path traversal
DataLinkDC · dinky
Medium5.3 - CVE-2026-124558
DataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgery
DataLinkDC · Dinky
Medium6.9 - CVE-2026-124326
DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal
DataLinkDC · Dinky
Medium5.3 - CVE-2026-122009
DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgery
DataLinkDC · Dinky
Medium6.9 - CVE-2026-70559
Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll
DataLinkDC · Dinky
High8.7 - CVE-2026-70558
Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token
DataLinkDC · Dinky
Critical9.3 - CVE-2026-3053
DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication
DataLinkDC · dinky
Medium6.9 - CVE-2026-3052
DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery
DataLinkDC · dinky
Medium5.3 - CVE-2026-3051
DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal
DataLinkDC · dinky
Medium5.3