Threats tagged 'ghsa-4fjq-hmwv-pfv4'

A server-side request forgery (SSRF) vulnerability exists in DataLinkDC Dinky up to version 1.2.5 in the FlinkWebURITemplateProxyServlet.getNewTargetUri function. This flaw allows remote attackers to manipulate the _authority argument, potentially causing the server to make unintended requests. Exploit code has been published, indicating the vulnerability is exploitable. The issue was reported via a GitHub Security Advisory (GHSA).