Cpe:2.3:a:datalinkdc:dinky:*:*:*:*:*:*:*:*

A server-side request forgery vulnerability in DataLinkDC Dinky (<= 1.2.5) allows remote attackers to manipulate the _authority argument to trigger unauthorized requests from the server.