Vulnerabilities in DataLinkDC
9 resultsCVE-2026-3051MEDIUMDataLinkDC dinky Project Name GitRepository.java getProjectDir path traversalEPSS 7.3%CVE-2026-70558CRITICALDinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default TokenEPSS 0.8%CVE-2026-3053MEDIUMDataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authenticationEPSS 0.8%CVE-2026-122009MEDIUMDataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side request forgeryEPSS 0.5%CVE-2026-70559HIGHDinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAllEPSS 0.5%CVE-2026-124326MEDIUMDataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversalEPSS 0.4%CVE-2026-3052MEDIUMDataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgeryEPSS 0.3%CVE-2026-124558MEDIUMDataLinkDC Dinky sql-gateway Endpoint SqlGateway.java SqlGateway.onOpen server-side request forgeryEPSS —CVE-2026-124572MEDIUMDataLinkDC dinky Catalogue Upload API CatalogueController.java CatalogueController.upload path traversalEPSS —