Threats tagged 'ghsa-9hhv-xrpj-v2gw'

A server-side request forgery (SSRF) vulnerability exists in DataLinkDC Dinky up to version 1.2.5 in the SqlGateway.onOpen function. This vulnerability allows remote attackers to manipulate the connectAddress argument, potentially causing the server to make unauthorized requests. The vulnerability has been publicly disclosed with exploit details available. The CVSS score is 7.3, indicating a high severity risk.