Dinky (Up to 1.2.5) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/dinky-up-to-1.2.5/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 05:28:25 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgDataLinkDC Dinky: Server-side request forgery (CVE-2026-124558)https://feed.craftedsignal.io/briefs/2026-11-dinky-ssrf-9742c8a4/Mon, 09 Nov 2026 05:28:25 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-dinky-ssrf-9742c8a4/DataLinkDC Dinky versions up to 1.2.5 contain a server-side request forgery (SSRF) vulnerability in the SqlGateway component.A server-side request forgery (SSRF) vulnerability has been identified in DataLinkDC Dinky up to 1.2.5. The vulnerability exists in the SqlGateway.onOpen function within SqlGateway.java of the sql-gateway component. Manipulation of the connectAddress argument leads to server-side request forgery. The attack can be launched remotely. Public exploit material is available.

]]>highadvisory