Datalinkdc Dinky
5 CVEs affecting Datalinkdc Dinky. Latest disclosed: 2026-08-06. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70558 | Critical | 9.8 | 2026-08-06 | Dinky's POST /download/uploadFromRsByLocal handler passes the caller-supplied path parameter directly to new File(path) and file.transferTo(dest) with no path… |
CVE-2026-70559 | High | 7.5 | 2026-08-06 | Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that short-circuits the class-level @SaC… |
CVE-2026-3053 | High | 7.3 | 2026-02-24 | A vulnerability was determined in DataLinkDC dinky up to 1.2.5. This affects the function addInterceptors of the file dinky-admin/src/main/java/org/dinky/confi… |
CVE-2026-3052 | Medium | 6.3 | 2026-02-24 | A vulnerability was found in DataLinkDC dinky up to 1.2.5. The impacted element is the function proxyUba of the file dinky-admin/src/main/java/org/dinky/contro… |
CVE-2026-3051 | Medium | 6.3 | 2026-02-24 | A vulnerability has been found in DataLinkDC dinky up to 1.2.5. The affected element is the function getProjectDir of the file dinky-admin/src/main/java/org/di… |