https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T13:25:45.019061+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124572 CVE-2026-124572 — DataLinkDC dinky Catalogue Upload API CatalogueController.java CatalogueController.upload path traversal 2026-11-11T13:25:45.022292+00:00

Affected: DataLinkDC dinky

A vulnerability has been found in DataLinkDC dinky up to 1.2.5. Affected by this issue is the function CatalogueController.upload of the file dinky-admin/src/main/java/org/dinky/controller/CatalogueController.java of the component Catalogue Upload API. The manipulation leads to path traversal. The attack is possible to be carried out remotely. The researcher claims to have submitted a GHSA on the repository of the project.