Threats tagged 'ghsa-5952-4gv2-m5gj'

A path traversal vulnerability exists in the CatalogueController.upload function of DataLinkDC dinky versions up to 1.2.5. This vulnerability allows remote attackers with limited privileges to manipulate file paths, potentially leading to limited integrity and availability impacts. The issue was reported by a researcher who submitted a GitHub Security Advisory (GHSA) for the project.